libvpx - security update
libvpx - security update
- Actualiza a 1.12.0-1+deb12u5
Publicación Actualización
PatchFirst · Vulnerabilidades recientes
Vulnerabilidades de libvpx
Vulnerabilidades publicadas para libvpx en los últimos 30 días: 0. Incluidas en el catálogo KEV: 0.
Vulnerabilidades: 31
Heap buffer overflow in libvpx
Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunderbird 140.7.2, and Thunderbird 147.0.2.
- Actualiza a 1.12.0-1+deb12u5
Publicación Actualizaciónlibvpx - security update
libvpx - security update
- Actualiza a 1.12.0-1+deb12u4
Publicación ActualizaciónCVE-2025-5283
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
- Actualiza a 1.12.0-1+deb12u4
Publicación Actualizaciónlibvpx - security update
libvpx - security update
- Actualiza a 1.12.0-1+deb12u3
Publicación ActualizaciónInteger overflow in libvpx
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond
- Actualiza a 1.12.0-1+deb12u3
Publicación ActualizaciónHeap overflow in libvpx
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
- Actualiza a 1.12.0-1+deb12u2
Publicación Actualizaciónlibvpx - security update
libvpx - security update
- Actualiza a 1.12.0-1+deb12u2
Publicación ActualizaciónCVE-2023-44488
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
- Actualiza a 1.12.0-1+deb12u2
Publicación Actualizaciónlibvpx - security update
libvpx - security update
- Actualiza a 1.12.0-1+deb12u1
Publicación ActualizaciónCVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
- Actualiza a 1.12.0-1+deb12u1
Publicación ActualizaciónCVE-2020-0034
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for exploitation.Product: AndroidVersions: Android-8.0 Android-8.1Android ID: A-62458770
- Actualiza a 1.7.0-3
Publicación ActualizaciónCVE-2019-9433
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-80479354
- Actualiza a 1.8.1-2
Publicación ActualizaciónCVE-2019-9371
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254
- Actualiza a 1.8.1-2
Publicación ActualizaciónCVE-2019-9325
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-112001302
- Actualiza a 1.8.1-2
Publicación ActualizaciónCVE-2019-9232
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483
- Actualiza a 1.8.1-2
Publicación ActualizaciónCVE-2017-13194
A vulnerability in the Android media framework (libvpx) related to odd frame width. Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0, 8.1. Android ID: A-64710201.
- Actualiza a 1.7.0-2
Publicación ActualizaciónCVE-2017-0393
A denial of service vulnerability in libvpx in Mediaserver could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-30436808.
- Actualiza a 1.6.1-1
Publicación ActualizaciónCVE-2016-6712
A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-30593752.
- Actualiza a 1.6.1-1
Publicación ActualizaciónCVE-2016-6711
A remote denial of service vulnerability in libvpx in Mediaserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as High due to the possibility of remote denial of service. Android ID: A-30593765.
- Actualiza a 1.6.1-1
Publicación Actualización
Comprueba tu servidor
Compara tu pila y las versiones instaladas con las bases actuales de vulnerabilidades.