Vendors / aomedia Records 15 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 6 CVSS 9.0–10.0
CVSS high 5 CVSS 7.0–8.9
Exploited now aomedia records in CISA KEV No aomedia vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority MEDIUM 46
aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02216 · Published 2021-06-04 · No fix listed CWE-120
Priority MEDIUM 46
aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01885 · Published 2021-06-02 · No fix listed CWE-416
Priority MEDIUM 46
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0205 · Published 2021-05-06 · No fix listed CWE-763
Priority MEDIUM 44
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().
CVSS 3.1 CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01175 · Published 2023-12-27 · Fixed in 3.7.1 CWE-20
Priority MEDIUM 42
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01772 · Published 2021-12-02 · No fix listed CWE-120
Priority MEDIUM 42
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01772 · Published 2021-12-02 · No fix listed CWE-787
Priority MEDIUM 41
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
CVSS 3.1 HIGH 8.8· Network · No auth · User interaction · EPSS 0.01474 · Published 2021-12-02 · No fix listed CWE-787
Priority MEDIUM 40
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.00738 · Published 2023-08-29 · No fix listed CWE-119
Priority LOW 32
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01485 · Published 2021-12-02 · No fix listed CWE-476
Priority LOW 32
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01485 · Published 2021-12-02 · No fix listed CWE-476
Priority LOW 31
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
CVSS 3.1 MEDIUM 6.5· Network · No auth · User interaction · EPSS 0.01192 · Published 2021-12-02 · No fix listed CWE-125
Open these records in search → All records by CVSS severity
Critical6 High5 Medium4 Low0 No CVSS0