Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: aomedia Component: Libavif Clear all filters
TI-2025-30544 CVE-2025-48175 · GHSA-44mp-2g68-7wvv

Integer overflow in aomedia libavif

Priority LOW 29

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00338 Published 2025-05-16 Fixed in 1.3.0 CWE-190
TI-2025-30543 CVE-2025-48174 · GHSA-f6x7-5x3c-j3rg

Integer overflow in aomedia libavif

Priority LOW 39

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00375 Published 2025-05-16 Fixed in 1.3.0 CWE-190