Threat Intelligence Database

A security update for Mozilla Firefox and related components addresses multiple vulnerabilities including heap buffer overflow, use-after-free, integer overflows, sandbox escapes, privilege escalations, mitigation bypasses, and information disclosure issues. These vulnerabilities affect various Firefox components such as the JavaScript engine, DOM, Audio/Video, Networking, Graphics, and Storage. The update is provided by Red Hat for Firefox versions distributed with Red Hat Enterprise Linux 9.2 and related products. The advisory rates the security impact as Important (high severity).

An integer overflow vulnerability (CVE-2024-5197) exists in the libvpx package's vpx_img_alloc() function, which is part of the VP8 video codec SDK used for encoding and decoding WebM multimedia files. This vulnerability has been rated as moderate severity by Red Hat Product Security. A security update addressing this issue is available for Red Hat Enterprise Linux 9.4 Extended Update Support and related variants. The update fixes the integer overflow flaw to prevent potential security issues related to memory allocation.

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Double-free in libvpx encoder (CVE-2025-5283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.