rpm package
opensuse/libvpx&distro=openSUSE Leap 15.1
pkg:rpm/opensuse/libvpx&distro=openSUSE%20Leap%2015.1
Vulnerabilities (6)
| CVE | Sev | CVSS | KEV | Affected versions | Fixed in | Published | Description |
|---|---|---|---|---|---|---|---|
| CVE-2020-0034 | — | < 1.6.1-lp151.5.6.1 | 1.6.1-lp151.5.6.1 | Mar 10, 2020 | In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for e | ||
| CVE-2019-9433 | — | < 1.6.1-lp151.5.3.1 | 1.6.1-lp151.5.3.1 | Sep 27, 2019 | In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A- | ||
| CVE-2019-9371 | — | < 1.6.1-lp151.5.3.1 | 1.6.1-lp151.5.3.1 | Sep 27, 2019 | In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-13278325 | ||
| CVE-2019-9325 | — | < 1.6.1-lp151.5.3.1 | 1.6.1-lp151.5.3.1 | Sep 27, 2019 | In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-1120013 | ||
| CVE-2019-9232 | — | < 1.6.1-lp151.5.3.1 | 1.6.1-lp151.5.3.1 | Sep 27, 2019 | In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122 | ||
| CVE-2019-2126 | — | < 1.6.1-lp151.5.3.1 | 1.6.1-lp151.5.3.1 | Aug 20, 2019 | In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version |
- CVE-2020-0034Mar 10, 2020affected < 1.6.1-lp151.5.6.1fixed 1.6.1-lp151.5.6.1
In vp8_decode_frame of decodeframe.c, there is a possible out of bounds read due to improper input validation. This could lead to remote information disclosure if error correction were turned on, with no additional execution privileges needed. User interaction is not needed for e
- CVE-2019-9433Sep 27, 2019affected < 1.6.1-lp151.5.3.1fixed 1.6.1-lp151.5.3.1
In libvpx, there is a possible information disclosure due to improper input validation. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-
- CVE-2019-9371Sep 27, 2019affected < 1.6.1-lp151.5.3.1fixed 1.6.1-lp151.5.3.1
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-13278325
- CVE-2019-9325Sep 27, 2019affected < 1.6.1-lp151.5.3.1fixed 1.6.1-lp151.5.3.1
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-1120013
- CVE-2019-9232Sep 27, 2019affected < 1.6.1-lp151.5.3.1fixed 1.6.1-lp151.5.3.1
In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122
- CVE-2019-2126Aug 20, 2019affected < 1.6.1-lp151.5.3.1fixed 1.6.1-lp151.5.3.1
In ParseContentEncodingEntry of mkvparser.cc, there is a possible double free due to a missing reset of a freed pointer. This could lead to remote code execution with no additional execution privileges needed. User interaction is needed for exploitation. Product: Android. Version