LI
Product
Libvpx
On CISA KEVExploited in the wild
6
CVEs
1
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 2High 3Medium 0Low 0
Watch
Add Libvpx to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2010-4203 | 9.8 | Nov 5 | WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly… Affected: before 0.9.5 |
| CVE-2024-5197 | 9.1 | Jun 3 | There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer… Affected: before 1.14.1 |
Showing 2