Approved changes feed: RSS · Atom

cpe:2.3:a:aomedia:libavif:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorAomedia (44ad30e4-1013-5e4a-b527-2b9b924ed399)
ProductLibavif (d2819cdd-91e4-5778-bb9f-9ae946142b85)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libavif purl2cpe 2026-06-01 10:11:50.472422
pkg:deb/ubuntu/libavif purl2cpe 2026-06-01 10:11:50.472425
pkg:github/aomediacodec/libavif purl2cpe 2026-06-01 10:11:50.472428
pkg:rpm/fedora/libavif purl2cpe 2026-06-01 10:11:50.472431

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-48175 vulnerable 2026-06-08 07:27:15.569678 Details available
MEDIUM (4.5)
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
Published: 2025-05-16T00:00:00.000Z
Updated: 2025-11-03T20:04:43.833Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-48174 vulnerable 2026-06-08 07:27:15.569361 Details available
MEDIUM (4.5)
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.
Published: 2025-05-16T00:00:00.000Z
Updated: 2025-11-03T20:04:42.428Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.