A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
CVSS Details
- CVSS 4.0 Base Score: 5.7 (MEDIUM)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:N/PR:L/UI:P/VC:L/VI:H/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:N/AU:N/R:A/V:D/RE:X/U:X)
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | alma-upgrade-libvpxalma-upgrade-libvpx-devel | Aug 30, 2024 | May 27, 2024 | |
| Amazon Linux Ami 2 | amazon-linux-ami-2-upgrade-firefoxamazon-linux-ami-2-upgrade-firefox-debuginfoamazon-linux-ami-2-upgrade-libvpxamazon-linux-ami-2-upgrade-libvpx-debuginfoamazon-linux-ami-2-upgrade-libvpx-develamazon-linux-ami-2-upgrade-libvpx-utilsamazon-linux-ami-2-upgrade-thunderbirdamazon-linux-ami-2-upgrade-thunderbird-debuginfo | Aug 14, 2024 | May 27, 2024 | |
| Amazon_linux_2023 | amazon-linux-2023-upgrade-libvpxamazon-linux-2023-upgrade-libvpx-debuginfoamazon-linux-2023-upgrade-libvpx-debugsourceamazon-linux-2023-upgrade-libvpx-develamazon-linux-2023-upgrade-libvpx-utilsamazon-linux-2023-upgrade-libvpx-utils-debuginfo | Sep 30, 2025 | May 27, 2024 | |
| Debian | debian-upgrade-libvpx | Jul 30, 2024 | May 27, 2024 | |
| Oracle_linux | — | oracle-linux-upgrade-libvpxoracle-linux-upgrade-libvpx-devel | Oct 16, 2024 | May 27, 2024 |
| Redhat_linux | redhat-upgrade-libvpxredhat-upgrade-libvpx-debuginforedhat-upgrade-libvpx-debugsourceredhat-upgrade-libvpx-develredhat-upgrade-libvpx-utils-debuginfo | Sep 13, 2024 | May 27, 2024 | |
| Rocky_linux | rocky-upgrade-libvpxrocky-upgrade-libvpx-debuginforocky-upgrade-libvpx-debugsourcerocky-upgrade-libvpx-devel | Sep 17, 2024 | May 27, 2024 | |
| Suse | — | suse-upgrade-libvpx-develsuse-upgrade-libvpx4suse-upgrade-libvpx7suse-upgrade-libvpx7-32bitsuse-upgrade-vpx-tools | Jul 12, 2024 | May 27, 2024 |
| Ubuntu | ubuntu-pro-upgrade-libvpxubuntu-upgrade-libvpx | Nov 19, 2024 | May 27, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub