PT-2024-5217

CVE-2023-6349

·

Published

2023-10-02

·

Updated

2026-08-20

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: libvpx versions prior to 1.13.1
Description: A heap overflow issue exists in libvpx when encoding a frame with larger dimensions than the originally configured size using VP9, potentially resulting in a heap overflow.
Recommendations: For versions prior to 1.13.1, we recommend upgrading to version 1.13.1 or above.
Exploitability
Exploit
Fix
Impacts
Vendors
Affected products
Related identifiers
ALSA-2024:5941
CESA-2024_5941
CLSA-2026-1787214152
INFSA-2024_5941
OPENSUSE-SU-2024_2409-1
RHSA-2024:5941
RHSA-2024_5941
RLSA-2024:5941
SUSE-SU-2024:2408-1
SUSE-SU-2024_2408-1
SUSE-SU-2024:2409-1
USN-6403-1
USN-6403-2
USN-6403-3
Found an issue in the description? Have something to add? Feel free to write us 👾