Описание
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libvpx | fixed | 1.13.1-2 | package | |
| libvpx | fixed | 1.12.0-1+deb12u2 | bookworm | package |
| libvpx | fixed | 1.9.0-1+deb11u2 | bullseye | package |
| libvpx | fixed | 1.7.0-3+deb10u2 | buster | package |
Примечания
https://bugs.chromium.org/p/webm/issues/detail?id=1642
Fixed by: https://github.com/webmproject/libvpx/commit/df9fd9d5b7325060b2b921558a1eb20ca7880937 (v1.13.1)
Same upstream commit as CVE-2023-44488
EPSS
Связанные уязвимости
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
Уязвимость библиотеки кодирования/декодирования видео libvpx, связанная с переполнением буфера в куче, позволяющая нарушителю вызвать отказ в обслуживании или оказать иное воздействие
EPSS