p PatchFirst

CVE-2023-39616

CVE-2023-39616

This page contains facts from public vulnerability sources. Check the original advisory before updating.

AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.

CVSS 7.5 · High · EPSS 0.7% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • aom Debian:12

    Versions
    • 3.10.0-1
    • 3.11.0-1
    • 3.11.0~rc1-1
    • 3.12.0-1
    • 3.12.0-1~exp1
    • 3.12.0~rc1-1~exp1
    • 3.12.1-1
    • 3.12.1~rc1-1~exp1
    • 3.13.1-1
    • 3.13.1-1~exp1
    • 3.13.1-2
    • 3.14.1-1
    • 3.6.0-1
    • 3.6.0-1+deb12u1
    • 3.6.0-1+deb12u2
    • 3.6.0-1+deb12u3
    • 3.6.1-1
    • 3.7.0-1
    • 3.7.0-1~exp1
    • 3.7.0~rc3-1
    • 3.7.0~really3.6.1-1
    • 3.7.1-1
    • 3.8.1-1
    • 3.8.2-1
    • 3.8.2-2
    • 3.8.2-3
    • 3.9.1-1
    • 3.9.1-1~exp1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • aom Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.7.0-1

    Update to 3.7.0-1

  • aom Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.7.0-1

    Update to 3.7.0-1

  • qtwebengine-opensource-src Ubuntu:Pro:18.04:LTS

    Versions
    • 5.9.1+dfsg-4
    • 5.9.1+dfsg-4ubuntu1
    • 5.9.2+dfsg-2ubuntu1
    • 5.9.3+dfsg-0ubuntu1
    • 5.9.4+dfsg-0ubuntu1
    • 5.9.5+dfsg-0ubuntu2
    • 5.9.5+dfsg-0ubuntu2+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:20.04:LTS

    Versions
    • 5.12.4+dfsg-1ubuntu1
    • 5.12.4+dfsg-1ubuntu3
    • 5.12.5+dfsg-3ubuntu1
    • 5.12.5+dfsg-6ubuntu2
    • 5.12.5+dfsg-7
    • 5.12.5+dfsg-7build1
    • 5.12.8+dfsg-0ubuntu1
    • 5.12.8+dfsg-0ubuntu1.1
    • 5.12.8+dfsg-0ubuntu1.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-webengine Ubuntu:22.04:LTS

    Versions
    • 6.2.2+dfsg-6ubuntu2
    • 6.2.4+dfsg-1ubuntu1
    • 6.2.4+dfsg-1ubuntu2
    • 6.2.4+dfsg-6ubuntu1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:22.04:LTS

    Versions
    • 5.15.6+dfsg-1
    • 5.15.6+dfsg-2
    • 5.15.7+dfsg-2
    • 5.15.8+dfsg-1
    • 5.15.8+dfsg-1build1
    • 5.15.8+dfsg-1build2
    • 5.15.8+dfsg-2
    • 5.15.9+dfsg-1
    • 5.15.9+dfsg-1ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-webengine Ubuntu:24.04:LTS

    Versions
    • 6.4.2-final+dfsg-11
    • 6.4.2-final+dfsg-12
    • 6.4.2-final+dfsg-12build1
    • 6.4.2-final+dfsg-12ubuntu1
    • 6.4.2-final+dfsg-12ubuntu7
    • 6.4.2-final+dfsg-12ubuntu9
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:24.04:LTS

    Versions
    • 5.15.15+dfsg-2
    • 5.15.15+dfsg-2build2
    • 5.15.15+dfsg-2ubuntu1
    • 5.15.16+dfsg-1
    • 5.15.16+dfsg-1ubuntu2
    • 5.15.16+dfsg-1ubuntu4
    • 5.15.16+dfsg-3
    • 5.15.16+dfsg-3ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-webengine Ubuntu:25.10

    Versions
    • 6.8.3+dfsg-0ubuntu1
    • 6.8.3+dfsg-0ubuntu2
    • 6.9.2+dfsg-2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:25.10

    Versions
    • 5.15.18+dfsg-2
    • 5.15.18+dfsg-2build1
    • 5.15.19+dfsg-1
    • 5.15.19+dfsg2-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-webengine Ubuntu:26.10

    Versions
    • 6.10.2+dfsg-1
    • 6.10.2+dfsg-4
    • 6.10.2+dfsg-5
    • 6.11.2+dfsg-3ubuntu1
    • 6.11.2+dfsg-3ubuntu2
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:26.10

    Versions
    • 5.15.19+dfsg2-4
    • 5.15.19+dfsg2-6
    • 5.15.19+dfsg2-7
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qt6-webengine Ubuntu:26.04:LTS

    Versions
    • 6.9.2+dfsg-2
    • 6.9.2+dfsg-4
    • 6.9.2+dfsg-4build1
    • 6.9.2+dfsg-4build2
    • 6.10.2+dfsg-1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • qtwebengine-opensource-src Ubuntu:Pro:26.04:LTS

    Versions
    • 5.15.19+dfsg2-1
    • 5.15.19+dfsg2-1build1
    • 5.15.19+dfsg2-2
    • 5.15.19+dfsg2-3
    • 5.15.19+dfsg2-4
    • 5.15.19+dfsg2-4ubuntu0.1~esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →