CVE-2023-44488

Опубликовано: 30 сент. 2023

Источник: debian

EPSS Низкий

Описание

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

Пакет	Статус	Версия исправления	Релиз	Тип
libvpx	fixed	1.12.0-1.2		package

https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223f (main)
https://github.com/webmproject/libvpx/commit/df9fd9d5b7325060b2b921558a1eb20ca7880937 (v1.13.1)
http://www.openwall.com/lists/oss-security/2023/09/30/4
Same commit as CVE-2023-6349

EPSS

Процентиль: 80%

0.01446

Низкий

CVE-2023-44488

CVSS3: 7.5

ubuntu

около 2 лет назад

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

CVE-2023-44488

CVSS3: 7.5

redhat

около 2 лет назад

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

CVE-2023-44488

CVSS3: 7.5

nvd

около 2 лет назад

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

CVE-2023-44488

CVSS3: 7.5

msrc

около 2 лет назад

VP9 in libvpx before 1.13.1 mishandles widths leading to a crash related to encoding.

GHSA-wc24-pw3j-j6vw

CVSS3: 7.5

github

около 2 лет назад

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

EPSS

Процентиль: 80%

0.01446

Низкий