Read the docs

aomedia

Records15All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical6CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9

Exploited now

aomedia records in CISA KEV

No aomedia vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

3 records in Libavif · all components

TI-2025-30543 CVE-2025-48174 · GHSA-f6x7-5x3c-j3rg

Integer overflow in aomedia libavif

Priority LOW 39

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00375 Published 2025-05-16 Fixed in 1.3.0 CWE-190
TI-2025-30544 CVE-2025-48175 · GHSA-44mp-2g68-7wvv

Integer overflow in aomedia libavif

Priority LOW 29

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00338 Published 2025-05-16 Fixed in 1.3.0 CWE-190
Open these records in search →