Approved changes feed: RSS · Atom

cpe:2.3:a:aomedia:libavif:0.8.0:*:*:*:*:*:*:*

part: a version: 0.8.0 update: *

VendorAomedia (44ad30e4-1013-5e4a-b527-2b9b924ed399)
ProductLibavif (d2819cdd-91e4-5778-bb9f-9ae946142b85)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:deb/debian/libavif purl2cpe 2026-06-01 10:11:50.472702
pkg:deb/ubuntu/libavif purl2cpe 2026-06-01 10:11:50.472703
pkg:github/aomediacodec/libavif purl2cpe 2026-06-01 10:11:50.472705
pkg:rpm/fedora/libavif purl2cpe 2026-06-01 10:11:50.472706

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-36407 vulnerable 2026-06-08 05:25:03.032764 Details available
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
Published: 2021-07-01T02:53:11.000Z
Updated: 2024-08-04T17:23:10.438Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.