Aomedia: Security Vulnerabilities
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.
CVSS Score
4.5
EPSS Score
0.001
Published
2025-05-16
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
CVSS Score
4.5
EPSS Score
0.001
Published
2025-05-16
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:
* Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
* Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
* Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
CVSS Score
9.8
EPSS Score
0.002
Published
2024-06-05
Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().
CVSS Score
9.0
EPSS Score
0.002
Published
2023-12-27
AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-08-29
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
CVSS Score
8.8
EPSS Score
0.002
Published
2021-12-02
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.
CVSS Score
6.5
EPSS Score
0.001
Published
2021-12-02
AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
CVSS Score
8.8
EPSS Score
0.002
Published
2021-12-02
AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h.
CVSS Score
8.8
EPSS Score
0.002
Published
2021-12-02
AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c.
CVSS Score
6.5
EPSS Score
0.002
Published
2021-12-02
Page 1