返回 CVE 浏览器

CVE-2023-44488

HIGH

7.5

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-30

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

Affected Platforms (CPE)

📦

Webmproject

Libvpx

< 1.13.1

💻

Redhat

Enterprise Linux

= 8.0= 9.0

💻

Debian

Debian Linux

= 10.0= 11.0= 12.0

💻

Fedoraproject

Fedora

= 37

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2023/09/30/4

🔗 https://bugzilla.redhat.com/show_bug.cgi?id=2241806

🔗 https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223f

🔗 https://github.com/webmproject/libvpx/commit/df9fd9d5b7325060b2b921558a1eb20ca7880937

🔗 https://github.com/webmproject/libvpx/compare/v1.13.0...v1.13.1

🔗 https://github.com/webmproject/libvpx/releases/tag/v1.13.1

🔗 https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html

🔗 https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/

相关漏洞威胁

CVE-2026-24478.8

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunde...

CVE-2025-52835.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption ...

CVE-2024-51975.9

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h,...

CVE-2023-63495.7

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size w...