Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

6 records

Vendor: Webmproject Component: Libvpx Clear all filters
TI-2024-04823 CVE-2024-5197 · GHSA-4h58-f788-v8pw

Integer overflow in libvpx

Priority LOW 28

There exists interger overflows in libvpx in versions prior to 1.14.1.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00814 Published 2024-06-03 Partial fix · 1.14.1 CWE-190
TI-2023-05828 CVE-2023-6349

Heap overflow in libvpx

Priority LOW 26

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.

CVSS 4.0MEDIUM 5.7 Local Low privileges User interaction EPSS 0.00365 Published 2024-05-27 Partial fix · 1.13.1 CWE-122
TI-2023-04799 CVE-2023-5217 · GHSA-qqvq-6xgj-jw8g

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.49013 Published 2023-09-28 Partial fix · 117.0.5938.132, 1.13.1 +5 CWE-787
TI-2010-03956 CVE-2010-4203 · GHSA-v9gv-2chp-hf2r

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before…

Priority MEDIUM 49

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04569 Published 2010-11-05 Fixed CWE-190