p PatchFirst

CVE-2023-6879

CVE-2023-6879 · heap buffer overflow in libaom

This page contains facts from public vulnerability sources. Check the original advisory before updating.

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

CVSS 9.0 · Critical · EPSS 1.2% · Fix available

Published
Updated

Stack: system

Affected products and versions

  • libaom

    Versions
    • ≥ 0, < 3.7.1: Affected (custom)

    Update to 3.7.1

  • aom Debian:12

    Versions
    • 3.10.0-1
    • 3.11.0-1
    • 3.11.0~rc1-1
    • 3.12.0-1
    • 3.12.0-1~exp1
    • 3.12.0~rc1-1~exp1
    • 3.12.1-1
    • 3.12.1~rc1-1~exp1
    • 3.13.1-1
    • 3.13.1-1~exp1
    • 3.13.1-2
    • 3.14.1-1
    • 3.6.0-1
    • 3.6.0-1+deb12u1
    • 3.6.0-1+deb12u2
    • 3.6.0-1+deb12u3
    • 3.6.1-1
    • 3.7.0-1
    • 3.7.0-1~exp1
    • 3.7.0~rc3-1
    • 3.7.0~really3.6.1-1
    • 3.7.1-1
    • 3.8.1-1
    • 3.8.2-1
    • 3.8.2-2
    • 3.8.2-3
    • 3.9.1-1
    • 3.9.1-1~exp1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • aom Debian:13

    Affected ranges
    • ECOSYSTEM: < 3.7.1-1

    Update to 3.7.1-1

  • aom Debian:14

    Affected ranges
    • ECOSYSTEM: < 3.7.1-1

    Update to 3.7.1-1

  • aom Ubuntu:20.04:LTS

    Versions
    • 1.0.0-3
    • 1.0.0.errata1-2
    • 1.0.0.errata1-2ubuntu3
    • 1.0.0.errata1-3
    • 1.0.0.errata1-3build1
    • 1.0.0.errata1-3+deb11u1build0.20.04.1
    • 1.0.0.errata1-3+deb11u1ubuntu0.1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

  • aom Ubuntu:Pro:22.04:LTS

    Versions
    • 1.0.0.errata1-3build1
    • 3.2.0-2
    • 3.3.0-1
    • 3.3.0-1ubuntu0.1
    • 3.3.0-1ubuntu0.1+esm1
    Affected ranges
    • ECOSYSTEM: (−∞, +∞)

    No fix published

Original sources

Check your server →