CVE Daily

CVE-2023-6349

A heap overflow vulnerability exists in libvpx - Encoding a frame that has large...

High CVSS 7.5

Overview

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.
We recommend upgrading to version 1.13.1 or above

CWE: CWE-122 Published: 2024-05-27T12:15:08.810
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 7.5 (HIGH)
  • Detected tags: heap_overflow (tag impact: LOW)

Recommended actions:

  • Prioritize remediation based on business criticality and exposure.
  • Limit exposure and increase monitoring until fixed.

Recommended tools

Tags