CVE-2023-6349

MEDIUM

5.7

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2024-05-27

Last Modified2026-06-17

Data SourcesNVD

Vulnerability Description

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx. We recommend upgrading to version 1.13.1 or above

Affected Platforms (CPE)

📦

Webmproject

Libvpx

< 1.13.1

References & Advisories

🔗 https://crbug.com/webm/1642

相关漏洞威胁

CVE-2026-24478.8

Heap buffer overflow in libvpx. This vulnerability was fixed in Firefox 147.0.4, Firefox ESR 140.7.1, Firefox ESR 115.32.1, Thunde...

CVE-2025-52835.4

Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption ...

CVE-2024-51975.9

There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h,...

CVE-2023-444887.5

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.