First published: Mon Oct 02 2023(Updated: )
VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. Reference: <a href="https://github.com/advisories/GHSA-wc24-pw3j-j6vw">https://github.com/advisories/GHSA-wc24-pw3j-j6vw</a> Upstream patch: <a href="https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223f">https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223f</a>
Affected Software | Affected Version | How to fix |
---|---|---|
WebM Project libvpx | <1.13.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
The severity of REDHAT-BUG-2241806 is classified as critical due to the potential for crashes during encoding.
To fix REDHAT-BUG-2241806, update libvpx to version 1.13.1 or later.
The affected software for REDHAT-BUG-2241806 is libvpx versions prior to 1.13.1.
REDHAT-BUG-2241806 is a vulnerability that involves mishandling widths in VP9 leading to crashes.
Yes, there is an upstream patch available in the code repository for libvpx addressing REDHAT-BUG-2241806.