PT-2024-5217 · Libvpx+7 · Libvpx+7

Published 2023-10-02 · Updated 2025-07-22 · CVE-2023-6349

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: libvpx versions prior to 1.13.1

Description: A heap overflow issue exists in libvpx when encoding a frame with larger dimensions than the originally configured size using VP9, potentially resulting in a heap overflow.

Recommendations: For versions prior to 1.13.1, we recommend upgrading to version 1.13.1 or above.

Exploit

Fix

DoS

Memory Corruption

Heap Based Buffer Overflow

Weakness Enumeration

CWE-787

CWE-122

Related Identifiers

ALSA-2024:5941

BDU:2024-05778

CESA-2024_5941

CVE-2023-6349

INFSA-2024_5941

OPENSUSE-SU-2024_2409-1

RHSA-2024:5941

RHSA-2024_5941

RLSA-2024:5941

SUSE-SU-2024:2408-1

SUSE-SU-2024:2409-1

SUSE-SU-2024_2408-1

USN-6403-1

USN-6403-2

USN-6403-3

Affected Products

Almalinux

Astra Linux

Centos

Red Hat

Red Os

Rocky Linux

Suse

Libvpx

References · 46

• 🔥 https://crbug.com/webm/1642 · Exploit
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory
• https://osv.dev/vulnerability/RLSA-2024:5941 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-44488 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2023-6349 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6403-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-5217 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2023-6349 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2408-1 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6403-2 · Vendor Advisory
• https://osv.dev/vulnerability/USN-6403-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:2409-1 · Vendor Advisory
• https://errata.almalinux.org/8/ALSA-2024-5941.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-6349 · Vendor Advisory
• https://ubuntu.com/security/notices/USN-6403-3 · Vendor Advisory