7.5
CVSSv3

CVE-2023-44488

Published: 30/09/2023 Updated: 16/11/2023
CVSS v3 Base Score: 7.5 | Impact Score: 3.6 | Exploitability Score: 3.9
VMScore: 0

Vulnerability Summary

VP9 in libvpx prior to 1.13.1 mishandles widths, leading to a crash related to encoding.

Vulnerable Product Search on Vulmon Subscribe to Product

webmproject libvpx

redhat enterprise linux 8.0

redhat enterprise linux 9.0

debian debian linux 10.0

debian debian linux 11.0

debian debian linux 12.0

fedoraproject fedora 37

Vendor Advisories

It was discovered that missing input sanitising in the encoding support in libvpx, a multimedia library for the VP8 and VP9 video codecs, may result in denial of service For the oldstable distribution (bullseye), this problem has been fixed in version 190-1+deb11u2 For the stable distribution (bookworm), this problem has been fixed in version 1 ...
Synopsis Important: libvpx security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libvpx is now available for Red Hat Enterprise Linux 8Red Hat Product Security has rated this update as having a se ...
Synopsis Important: libvpx security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libvpx is now available for Red Hat Enterprise Linux 9Red Hat Product Security has rated this update as having a se ...
Synopsis Important: libvpx security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libvpx is now available for Red Hat Enterprise Linux 86 Extended Update SupportRed Hat Product Security has rated ...
Synopsis Important: libvpx security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libvpx is now available for Red Hat Enterprise Linux 90 Extended Update SupportRed Hat Product Security has rated ...
Synopsis Important: libvpx security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libvpx is now available for Red Hat Enterprise Linux 84 Advanced Mission Critical Update Support, Red Hat Enterpris ...
Synopsis Important: libvpx security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libvpx is now available for Red Hat Enterprise Linux 81 Update Services for SAP SolutionsRed Hat Product Security ...
Synopsis Important: libvpx security update Type/Severity Security Advisory: Important Red Hat Insights patch analysis Identify and remediate systems affected by this advisory View affected systems Topic An update for libvpx is now available for Red Hat Enterprise Linux 82 Advanced Update Support, Red Hat Enterprise Linux 82 Telec ...
VP9 in libvpx before 1131 mishandles widths, leading to a crash related to encoding (CVE-2023-44488) ...
VP9 in libvpx before 1131 mishandles widths, leading to a crash related to encoding (CVE-2023-44488) ...
Description<!---->A heap-based buffer overflow flaw was found in libvpx, a library used to process VP9 video codecs data This issue occurs when processing certain specially formatted video data via a crafted HTML page, allowing an attacker to crash or remotely execute arbitrary code in an application, such as a web browser that is compiled with th ...