LI
Product
Libvpx
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Libvpx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-5217 In wildKEV | 8.8 | Sep 28 | Google Chromium libvpx Heap Buffer Overflow Vulnerability Affected: before 1.13.1 |
| CVE-2010-4203 | 9.8 | Nov 5 | WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly… Affected: before 0.9.5 |
| CVE-2024-5197 | 9.1 | Jun 3 | There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer… Affected: before 1.14.1 |
| CVE-2023-6349 | 7.5 | May 27 | A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx Affected: before 1.13.1 |
| CVE-2023-44488 | 7.5 | Sep 30 | VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding Affected: before 1.13.1 |
| CVE-2012-0823 | – | Feb 23 | VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting… Affected: through 0.9.7; 0.9.0; 0.9.1; 0.9.2; 0.9.5; 0.9.6; +1 more |
Showing 6