Threat database

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Heap buffer overflow in libvpx (CVE-2026-2447) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format. Security Fix(es): * libvpx: Double-free in libvpx encoder (CVE-2025-5283) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

An integer overflow vulnerability (CVE-2024-5197) exists in the vpx_img_alloc() function of the libvpx package, which is part of the VP8 video codec SDK used for encoding and decoding WebM multimedia files. This vulnerability has been rated as moderate severity by Red Hat Product Security. A security update addressing this issue is available for Red Hat Enterprise Linux 9.4 Extended Update Support and related variants. The update fixes the integer overflow flaw to prevent potential security issues related to memory allocation.