Approved changes feed: RSS · Atom

cpe:2.3:a:webmproject:libvpx:0.9.2:*:*:*:*:*:*:*

part: a version: 0.9.2 update: *

VendorWebmproject (041199dd-212a-5381-8ad3-ce9542ea3f81)
ProductLibvpx (33ee453b-f159-54fe-8582-5dc95dcb4deb)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bitbucket/chromiumsrc/libvpx purl2cpe 2026-06-01 10:11:16.744284
pkg:bitbucket/nguyennv/libvpx purl2cpe 2026-06-01 10:11:16.744286
pkg:bitbucket/teamlinphone/libvpx purl2cpe 2026-06-01 10:11:16.744287
pkg:deb/debian/libvpx purl2cpe 2026-06-01 10:11:16.744288
pkg:deb/ubuntu/libvpx purl2cpe 2026-06-01 10:11:16.744290
pkg:github/webmproject/libvpx purl2cpe 2026-06-01 10:11:16.744291
pkg:gitlab/redhat/libvpx purl2cpe 2026-06-01 10:11:16.744292
pkg:googlesource/webm purl2cpe 2026-06-01 10:11:16.744294
pkg:rpm/centos/libvpx purl2cpe 2026-06-01 10:11:16.744295
pkg:rpm/fedora/libvpx purl2cpe 2026-06-01 10:11:16.744296
pkg:rpm/opensuse/libvpx purl2cpe 2026-06-01 10:11:16.744298

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-0823 vulnerable 2026-06-08 05:00:45.631481 Details available
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
Published: 2012-02-23T19:00:00.000Z
Updated: 2024-08-06T18:38:14.724Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.