Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

webmproject libvpx vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv3
CVE-2023-44488
VP9 in libvpx prior to 1.13.1 mishandles widths, leading to a crash related to encoding.
Webmproject LibvpxRedhat Enterprise Linux 8.0Redhat Enterprise Linux 9.0Debian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0Fedoraproject Fedora 37
8.8
CVSSv3
CVE-2023-5217
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome before 117.0.5938.132 and libvpx 1.13.1 allowed a remote malicious user to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Webmproject LibvpxMicrosoft Edge 116.0.1938.98Microsoft Edge 117.0.2045.47Microsoft Edge Chromium 116.0.5845.229Microsoft Edge Chromium 117.0.5938.132Mozilla Firefox FocusMozilla Firefox EsrMozilla FirefoxMozilla ThunderbirdFedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Debian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0Apple Iphone OsApple Ipad OsApple Ipad Os 16.7Apple Iphone Os 16.7
NA
CVE-2012-0823
VP8 Codec SDK (libvpx) prior to 1.0.0 "Duclair" allows remote malicious users to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, rel...
Webmproject Libvpx 0.9.7Webmproject Libvpx 0.9.6Webmproject Libvpx 0.9.5Webmproject Libvpx 0.9.2Webmproject Libvpx 0.9.1Webmproject LibvpxWebmproject Libvpx 0.9.0
9.8
CVSSv3
CVE-2010-4203
WebM libvpx (aka the VP8 Codec SDK) prior to 0.9.5, as used in Google Chrome prior to 7.0.517.44, allows remote malicious users to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.
Google ChromeWebmproject LibvpxRedhat Enterprise Linux Desktop 6.0Redhat Enterprise Linux Server 6.0Redhat Enterprise Linux Workstation 6.0
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
blind SQL injectionCVE-2006-4304CVE-2023-26603CVE-2024-28327CVE-2023-50363CVE-2024-21905template injectionCVE-2024-3400cross-site request forgery
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook