LI
Product
Libavif
3
CVEs
0
On KEV
9.1
Max CVSS
0
New 30D
Severity mix
Critical 1High 1Medium 1Low 0
Watch
Add Libavif to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-48174 | 9.1 | May 16 | In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size Affected: before 1.3.0 |
| CVE-2020-36407 | 8.8 | Jul 1 | libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid Affected: 0.8.0; 0.8.1 |
| CVE-2025-48175 | 6.5 | May 16 | In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes Affected: before 1.3.0 |
Showing 3