AZL-42958
See a problem?- Import Source
- https://github.com/microsoft/AzureLinuxVulnerabilityData/blob/main/osv/AZL-42958.json
- JSON Data
- https://api.osv.dev/v1/vulns/AZL-42958
- Upstream
- Published
- 2024-06-03T14:15:09Z
- Modified
- 2026-04-21T04:30:50Z
- Summary
- CVE-2024-5197 affecting package libvpx 1.13.1-1
- Details
-
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond
- References