CVE-2023-6879

Опубликовано: 27 дек. 2023

Источник: nvd

CVSS3: 9

CVSS3: 9.8

EPSS Низкий

Описание

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

Ссылки

https://aomedia.googlesource.com/aom/+/refs/tags/v3.7.1
Patch
https://crbug.com/aomedia/3491
Exploit
Issue Tracking
Mailing List
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/
Mailing List
Third Party Advisory
https://aomedia.googlesource.com/aom/+/refs/tags/v3.7.1
Patch
https://crbug.com/aomedia/3491
Exploit
Issue Tracking
Mailing List
Patch
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
Mailing List
Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:aomedia:aomedia:*:*:*:*:*:*:*:*

Версия до 3.7.1 (исключая)

Конфигурация 2

Одно из

cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*

cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

EPSS

Процентиль: 37%

0.00155

Низкий

9 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-20

CWE-787

Связанные уязвимости

CVE-2023-6879

CVSS3: 9

ubuntu

больше 1 года назад

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

CVE-2023-6879

CVSS3: 9.8

redhat

больше 1 года назад

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

CVE-2023-6879

CVSS3: 9

debian

больше 1 года назад

Increasing the resolution of video frames, while performing a multi-th ...

SUSE-SU-2024:4333-1

suse-cvrf

9 месяцев назад

Security update for libaom, libyuv

SUSE-SU-2024:0517-1

suse-cvrf

больше 1 года назад

Security update for libaom

EPSS

Процентиль: 37%

0.00155

Низкий

9 Critical

CVSS3

9.8 Critical

CVSS3

Дефекты

CWE-20

CWE-787