Approved changes feed: RSS · Atom
cpe:2.3:a:chromium:libvpx:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Chromium (7aa2a84f-9696-5f27-bcca-d248c81d5421) |
|---|---|
| Product | Libvpx (2630cb52-c081-5581-8d45-f53a77055e11) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-5197 |
vulnerable | 2026-06-08 06:56:15.135795 |
Integer overflow in libvpx
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond
Published: 2024-06-03T13:30:26.925Z
Updated: 2025-02-13T17:54:05.905Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-6349 |
vulnerable | 2026-06-08 06:19:47.001726 |
Heap overflow in libvpx
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.
We recommend upgrading to version 1.13.1 or above
Published: 2024-05-27T11:26:58.207Z
Updated: 2024-08-02T08:28:21.518Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.