CVE-2023-6349: Heap overflow in libvpx
First published: Mon May 27 2024(Updated: )
A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above
Credit: cve-coordination@google.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| redhat/libvpx | <1.13.1 | 1.13.1 |
| IBM QRadar SIEM | <=7.5 - 7.5.0 UP9 IF03 | |
| IBM QRadar Incident Forensics | <=7.5 - 7.5.0 UP9 IF03 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://crbug.com/webm/1642
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2283554
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2283556
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2283558
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2283559
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2283560
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2283561
- https://bugzilla.redhat.com/show_bug.cgi/show_bug.cgi?id=2283557
- https://access.redhat.com/errata/RHSA-2024:5941
- https://bugzilla.redhat.com/show_bug.cgi?id=2283553
- https://www.ibm.com/support/pages/node/7173420 (Advisory)
- agent/title
- agent/weakness
- agent/first-publish-date
- agent/type
- agent/author
- agent/event
- collector/nvd-api
- source/NVD
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/severity
- agent/description
- agent/softwarecombine
- collector/redhat-bugzilla
- source/Red Hat
- alias/CVE-2023-6349
- agent/software-canonical-lookup
- agent/last-modified-date
- agent/trending
- agent/source
- agent/tags
- collector/ibm-support
- source/IBM
- package-manager/redhat
- vendor/ibm
- canonical/ibm qradar siem
- version/ibm qradar siem/7.5 - 7.5.0 up9 if03
- canonical/ibm qradar incident forensics
- version/ibm qradar incident forensics/7.5 - 7.5.0 up9 if03