Vulnerabilities

TI-2023-06284 CVE-2023-6879 · GHSA-fvcr-3mhq-rw2x

heap buffer overflow in libaom

MEDIUM 44

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01175 Published 2023-12-27 Fixed in 3.7.1 CWE-20

TI-2023-20701 CVE-2023-39616 · GHSA-8gm5-9276-cvrc

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the…

MEDIUM 40

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00738 Published 2023-08-29 No fix listed CWE-119

TI-2020-18461 CVE-2020-36135 · GHSA-3mrv-v95f-r4rx

AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.

LOW 32

AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01485 Published 2021-12-02 No fix listed CWE-476

TI-2020-18460 CVE-2020-36134 · GHSA-2rh7-96qm-4h8w

AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.

LOW 31

AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01192 Published 2021-12-02 No fix listed CWE-125

TI-2020-18459 CVE-2020-36133 · GHSA-cw3p-3434-gw6r

AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.

MEDIUM 42

AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01772 Published 2021-12-02 No fix listed CWE-120

TI-2020-18458 CVE-2020-36131 · GHSA-g8f8-rq6r-4rrh

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.

MEDIUM 42

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01772 Published 2021-12-02 No fix listed CWE-787

TI-2020-18457 CVE-2020-36130 · GHSA-w9vw-69gr-j5w3

AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.

LOW 32

AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.01485 Published 2021-12-02 No fix listed CWE-476

TI-2020-18456 CVE-2020-36129 · GHSA-w6cc-5mpf-4rmj

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.

MEDIUM 41

AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.01474 Published 2021-12-02 No fix listed CWE-787

TI-2021-10877 CVE-2021-30475 · GHSA-867w-fmxg-m2g8

aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.

MEDIUM 46

aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02216 Published 2021-06-04 No fix listed CWE-120

TI-2021-10876 CVE-2021-30474 · GHSA-5r4m-4q9j-5jhh

aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.

MEDIUM 46

aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01885 Published 2021-06-02 No fix listed CWE-416

TI-2021-10875 CVE-2021-30473 · GHSA-jr38-ch73-ccgx

aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.

MEDIUM 46

aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0205 Published 2021-05-06 No fix listed CWE-763

Vulnerabilities

Filters