Aomedia
Products
4- 11 CVEs
- 7 CVEs
- 6 CVEs
- 4 CVEs
Recent CVEs
18| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2024-5171 | Cri | 0.64 | 9.8 | 0.01 | Jun 5, 2024 | Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations… | ||
| CVE-2021-30475 | Cri | 0.64 | 9.8 | 0.02 | Jun 4, 2021 | aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. | ||
| CVE-2021-30474 | Cri | 0.64 | 9.8 | 0.02 | Jun 2, 2021 | aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free. | ||
| CVE-2021-30473 | Cri | 0.64 | 9.8 | 0.02 | May 6, 2021 | aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap. | ||
| CVE-2023-6879 | Cri | 0.59 | 9.0 | 0.01 | Dec 27, 2023 | Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc(). | ||
| CVE-2020-36133 | Hig | 0.57 | 8.8 | 0.02 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h. | ||
| CVE-2020-36131 | Hig | 0.57 | 8.8 | 0.02 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c. | ||
| CVE-2020-36129 | Hig | 0.57 | 8.8 | 0.01 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c. | ||
| CVE-2020-36407 | Hig | 0.50 | 8.8 | 0.01 | Jul 1, 2021 | libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. | ||
| CVE-2023-39616 | Hig | 0.49 | 7.5 | 0.01 | Aug 29, 2023 | AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h. | ||
| CVE-2026-56211 | Hig | 0.46 | 7.1 | 0.00 | Jun 19, 2026 | A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal… | ||
| CVE-2026-56210 | Hig | 0.46 | 7.1 | 0.00 | Jun 19, 2026 | A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an… | ||
| CVE-2020-36135 | Med | 0.42 | 6.5 | 0.01 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c. | ||
| CVE-2020-36134 | Med | 0.42 | 6.5 | 0.01 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c. | ||
| CVE-2020-36130 | Med | 0.42 | 6.5 | 0.01 | Dec 2, 2021 | AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c. | ||
| CVE-2018-18064 | Med | 0.42 | 6.5 | 0.01 | Oct 8, 2018 | cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the… | ||
| CVE-2025-48175 | Med | 0.00 | 4.5 | 0.00 | May 16, 2025 | In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. | ||
| CVE-2025-48174 | Med | 0.00 | 4.5 | 0.00 | May 16, 2025 | In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. |
- risk 0.64cvss 9.8epss 0.01
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations…
- risk 0.64cvss 9.8epss 0.02
aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.
- risk 0.64cvss 9.8epss 0.02
aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
- risk 0.64cvss 9.8epss 0.02
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
- risk 0.59cvss 9.0epss 0.01
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().
- risk 0.57cvss 8.8epss 0.02
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
- risk 0.57cvss 8.8epss 0.02
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
- risk 0.57cvss 8.8epss 0.01
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
- risk 0.50cvss 8.8epss 0.01
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
- risk 0.49cvss 7.5epss 0.01
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.
- risk 0.46cvss 7.1epss 0.00
A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control allows an attacker to supply crafted video frame pixels that overlap with internal…
- risk 0.46cvss 7.1epss 0.00
A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows setting a spatial_layer_id exceeding the configured number of layers. This causes an…
- risk 0.42cvss 6.5epss 0.01
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
- risk 0.42cvss 6.5epss 0.01
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
- risk 0.42cvss 6.5epss 0.01
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
- risk 0.42cvss 6.5epss 0.01
cairo through 1.15.14 has an out-of-bounds stack-memory write during processing of a crafted document by WebKitGTK+ because of the interaction between cairo-rectangular-scan-converter.c (the generate and render_rows functions) and cairo-image-compositor.c (the…
- risk 0.00cvss 4.5epss 0.00
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
- risk 0.00cvss 4.5epss 0.00
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.