Approved changes feed: RSS · Atom
cpe:2.3:a:webmproject:libvpx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Webmproject (041199dd-212a-5381-8ad3-ce9542ea3f81) |
|---|---|
| Product | Libvpx (33ee453b-f159-54fe-8582-5dc95dcb4deb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/chromiumsrc/libvpx |
purl2cpe | 2026-06-01 10:11:16.744222 |
pkg:bitbucket/nguyennv/libvpx |
purl2cpe | 2026-06-01 10:11:16.744226 |
pkg:bitbucket/teamlinphone/libvpx |
purl2cpe | 2026-06-01 10:11:16.744228 |
pkg:deb/debian/libvpx |
purl2cpe | 2026-06-01 10:11:16.744231 |
pkg:deb/ubuntu/libvpx |
purl2cpe | 2026-06-01 10:11:16.744234 |
pkg:github/webmproject/libvpx |
purl2cpe | 2026-06-01 10:11:16.744237 |
pkg:gitlab/redhat/libvpx |
purl2cpe | 2026-06-01 10:11:16.744240 |
pkg:googlesource/webm |
purl2cpe | 2026-06-01 10:11:16.744243 |
pkg:rpm/centos/libvpx |
purl2cpe | 2026-06-01 10:11:16.744245 |
pkg:rpm/fedora/libvpx |
purl2cpe | 2026-06-01 10:11:16.744248 |
pkg:rpm/opensuse/libvpx |
purl2cpe | 2026-06-01 10:11:16.744251 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5197 |
vulnerable | 2026-06-08 06:56:15.136670 |
Integer overflow in libvpx
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond
Published: 2024-06-03T13:30:26.925Z
Updated: 2025-02-13T17:54:05.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6349 |
vulnerable | 2026-06-08 06:19:47.001782 |
Heap overflow in libvpx
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.
We recommend upgrading to version 1.13.1 or above
Published: 2024-05-27T11:26:58.207Z
Updated: 2024-08-02T08:28:21.518Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-5217 |
vulnerable | 2026-06-08 06:19:42.896947 |
Details available
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Published: 2023-09-28T15:23:18.340Z
Updated: 2025-10-21T23:05:36.191Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-44488 |
vulnerable | 2026-06-08 06:12:41.457813 |
Details available
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.
Published: 2023-09-30T00:00:00.000Z
Updated: 2024-09-23T16:15:31.069Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2010-4203 |
vulnerable | 2026-06-08 04:55:19.451053 |
Details available
WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.
Published: 2010-11-05T22:00:00.000Z
Updated: 2024-08-07T03:34:37.749Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.