Attestkeep
Language: English
Sign up

Vulnerabilities / CVE-2024-5171

critical

CVE-2024-5171

libaom: Integer overflow in internal function img_alloc_helper

Published Modified CWE 20, 190
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.

Severity by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Red Hat8.1CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Julia10.0CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

Trivy's own label is CRITICAL. Rated critical by NVD, Julia. Rated lower by Red Hat (medium), Ubuntu (medium).

Description

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.

Affected packages and fixed versions

SourcePackageFixed in
julia::Julia Ecosystem Security Advisorieslibaom_jll3.11.0+0
alpine 3.20aom3.9.1-r0
alpine 3.21aom3.9.1-r0
alpine 3.22aom3.9.1-r0
alpine 3.23aom3.9.1-r0
alpine 3.24aom3.9.1-r0
alpine edgeaom3.9.1-r0
debian 11aom1.0.0.errata1-3+deb11u2
debian 12aom3.6.0-1+deb12u1
debian 13aom3.8.2-3
debian 14aom3.8.2-3
echoaom3.6.0-1+deb12u1
Show all 42 entries from 26 sources
SourcePackageFixed in
julia::Julia Ecosystem Security Advisorieslibaom_jll3.11.0+0
alpine 3.20aom3.9.1-r0
alpine 3.21aom3.9.1-r0
alpine 3.22aom3.9.1-r0
alpine 3.23aom3.9.1-r0
alpine 3.24aom3.9.1-r0
alpine edgeaom3.9.1-r0
debian 11aom1.0.0.errata1-3+deb11u2
debian 12aom3.6.0-1+deb12u1
debian 13aom3.8.2-3
debian 14aom3.8.2-3
echoaom3.6.0-1+deb12u1
rapidfort alma 8firefoxno fix listed
rapidfort alma 8thunderbirdno fix listed
rapidfort alma 9firefoxno fix listed
rapidfort alma 9firefox-x11no fix listed
rapidfort alma 9thunderbirdno fix listed
rapidfort fedora 41aom0:3.9.0-4.fc41
rapidfort fedora 41libaom0:3.9.0-4.fc41
rapidfort fedora 41rf-aom0:3.9.0-4.fc41
rapidfort fedora 41rf-libaom0:3.9.0-4.fc41
rapidfort Oracle Linux 9firefoxno fix listed
rapidfort Oracle Linux 9firefox-x11no fix listed
rapidfort Oracle Linux 9thunderbirdno fix listed
rapidfort rocky 8firefoxno fix listed
rapidfort rocky 8thunderbirdno fix listed
rapidfort rocky 9firefoxno fix listed
rapidfort rocky 9firefox-x11no fix listed
rapidfort rocky 9thunderbirdno fix listed
Red Hatfirefoxno fix listed
Red Hatfirefox-x11no fix listed
Red Hatfirefox:flatpak::firefoxno fix listed
Red Hatfirefox:flatpak::firefox-x11no fix listed
Red Hatthunderbirdno fix listed
Red Hatthunderbird:flatpak::thunderbirdno fix listed
root.io debian 11rootio-aom1.0.0.errata1-3+deb11u2
root.io debian 12rootio-aom3.6.0-1+deb12u1
ubuntu 20.04aom1.0.0.errata1-3+deb11u1ubuntu0.1
ubuntu 20.04-ESMaom1.0.0.errata1-3+deb11u1ubuntu0.1
ubuntu 22.04aom3.3.0-1ubuntu0.1
ubuntu 24.04aom3.8.2-2ubuntu0.1
ubuntu 24.10aom3.8.2-2ubuntu1

References

All 9 references

Vulnerability data compiled from the Trivy vulnerability database (trivy-db, Aqua Security, Apache License 2.0), which aggregates third-party advisories. CVE records are published by The MITRE Corporation under the CVE Terms of Use; CVE is a trademark of MITRE. This product uses data from the NVD API but is not endorsed or certified by the NVD. Severity, titles and advisory data from the GitHub Advisory Database (CC BY 4.0), Red Hat security data (CC BY 4.0) and the other sources linked on each entry. Entries may be summarised or re-formatted; the linked original is the authoritative record.