critical
CVE-2024-5197
libvpx: Integer overflow in vpx_img_alloc()
In the Trivy database since at least 24 Oct 2026, 07:11 UTCWhen it arrived before that build is not recorded.
Severity by source
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H
Red Hat7.1CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:H/I:H/A:H
Julia5.9CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/VI:H/VA:N/SC:L/SI:L/SA:N
Trivy's own label is CRITICAL. Rated critical by NVD. Rated lower by Red Hat (medium), AlmaLinux (medium), Amazon (medium), Julia (medium), Oracle (medium), Rocky Linux (medium), Ubuntu (medium).
Description
There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. Calling vpx_img_wrap() with a large value of the d_w, d_h, or stride_align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_t struct may be invalid. We recommend upgrading to version 1.14.1 or beyond
Affected packages and fixed versions
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | libvpx, libvpx-devel | 1.7.0-11.el8_10 |
| alma 9 | libvpx, libvpx-devel | 1.9.0-8.el9_5 |
| alpine 3.20 | libvpx | 1.14.1-r0 |
| alpine 3.21 | libvpx | 1.14.1-r0 |
| alpine 3.22 | libvpx | 1.14.1-r0 |
| alpine 3.23 | libvpx | 1.14.1-r0 |
| alpine 3.24 | libvpx | 1.14.1-r0 |
| alpine edge | libvpx | 1.14.1-r0 |
| amazon linux 2 | libvpx, libvpx-debuginfo, libvpx-devel and 2 more | 1.9.0-5.amzn2.0.4 and 1 more |
| amazon linux 2023 | libvpx, libvpx-debuginfo, libvpx-debugsource and 3 more | 1.11.0-1.amzn2023.0.5 |
| debian 10 | libvpx | 1.7.0-3+deb10u3 |
| debian 11 | libvpx | 1.9.0-1+deb11u3 |
Show all 67 entries from 35 sources
| Source | Package | Fixed in |
|---|---|---|
| alma 8 | libvpx | 1.7.0-11.el8_10 |
| alma 8 | libvpx-devel | 1.7.0-11.el8_10 |
| alma 9 | libvpx | 1.9.0-8.el9_5 |
| alma 9 | libvpx-devel | 1.9.0-8.el9_5 |
| alpine 3.20 | libvpx | 1.14.1-r0 |
| alpine 3.21 | libvpx | 1.14.1-r0 |
| alpine 3.22 | libvpx | 1.14.1-r0 |
| alpine 3.23 | libvpx | 1.14.1-r0 |
| alpine 3.24 | libvpx | 1.14.1-r0 |
| alpine edge | libvpx | 1.14.1-r0 |
| amazon linux 2 | libvpx | 1.9.0-5.amzn2.0.4 |
| amazon linux 2 | libvpx-debuginfo | 1.9.0-5.amzn2.0.4 |
| amazon linux 2 | libvpx-devel | 1.9.0-5.amzn2.0.4 |
| amazon linux 2 | libvpx-utils | 1.9.0-5.amzn2.0.4 |
| amazon linux 2 | thunderbird | 140.4.0-1.amzn2.0.1 |
| amazon linux 2023 | libvpx | 1.11.0-1.amzn2023.0.5 |
| amazon linux 2023 | libvpx-debuginfo | 1.11.0-1.amzn2023.0.5 |
| amazon linux 2023 | libvpx-debugsource | 1.11.0-1.amzn2023.0.5 |
| amazon linux 2023 | libvpx-devel | 1.11.0-1.amzn2023.0.5 |
| amazon linux 2023 | libvpx-utils | 1.11.0-1.amzn2023.0.5 |
| amazon linux 2023 | libvpx-utils-debuginfo | 1.11.0-1.amzn2023.0.5 |
| debian 10 | libvpx | 1.7.0-3+deb10u3 |
| debian 11 | libvpx | 1.9.0-1+deb11u3 |
| debian 12 | libvpx | 1.12.0-1+deb12u3 |
| debian 13 | libvpx | 1.14.1-1 |
| debian 14 | libvpx | 1.14.1-1 |
| echo | libvpx | 1.12.0-1+deb12u3 |
| julia::Julia Ecosystem Security Advisories | LibVPX_jll | 1.15.2+0 |
| Oracle Linux 8 | libvpx | 1.7.0-11.el8_10 |
| Oracle Linux 8 | libvpx-devel | 1.7.0-11.el8_10 |
| Oracle Linux 9 | libvpx | 1.9.0-8.el9_5 |
| Oracle Linux 9 | libvpx-devel | 1.9.0-8.el9_5 |
| rapidfort alma 8 | firefox | no fix listed |
| rapidfort alma 8 | thunderbird | no fix listed |
| rapidfort alma 9 | firefox | no fix listed |
| rapidfort alma 9 | firefox-x11 | no fix listed |
| rapidfort alma 9 | thunderbird | no fix listed |
| rapidfort amazon linux 2023 | libvpx | 1.11.0-1.amzn2023.0.5 |
| rapidfort amazon linux 2023 | libvpx-devel | 1.11.0-1.amzn2023.0.5 |
| rapidfort amazon linux 2023 | libvpx-utils | 1.11.0-1.amzn2023.0.5 |
| rapidfort Oracle Linux 9 | firefox | no fix listed |
| rapidfort Oracle Linux 9 | firefox-x11 | no fix listed |
| rapidfort Oracle Linux 9 | libvpx | 0:1.9.0-8.el9_5 |
| rapidfort Oracle Linux 9 | thunderbird | no fix listed |
| rapidfort rocky 8 | firefox | no fix listed |
| rapidfort rocky 8 | thunderbird | no fix listed |
| rapidfort rocky 9 | firefox | no fix listed |
| rapidfort rocky 9 | firefox-x11 | no fix listed |
| rapidfort rocky 9 | thunderbird | no fix listed |
| Red Hat | firefox | no fix listed |
| Red Hat | firefox-x11 | no fix listed |
| Red Hat | firefox:flatpak::firefox | no fix listed |
| Red Hat | firefox:flatpak::firefox-x11 | no fix listed |
| Red Hat | libvpx | no fix listed |
| Red Hat | libvpx-devel | no fix listed |
| Red Hat | libvpx-utils | no fix listed |
| Red Hat | thunderbird | no fix listed |
| Red Hat | thunderbird:flatpak::thunderbird | no fix listed |
| rocky 8 | libvpx | 1.7.0-11.el8_10 |
| rocky 9 | libvpx | 1.9.0-8.el9_5 |
| ubuntu 16.04-ESM | libvpx | 1.5.0-2ubuntu1.1+esm3 |
| ubuntu 18.04-ESM | libvpx | 1.7.0-3ubuntu0.18.04.1+esm2 |
| ubuntu 20.04 | libvpx | 1.8.2-1ubuntu0.3 |
| ubuntu 20.04-ESM | libvpx | 1.8.2-1ubuntu0.3 |
| ubuntu 22.04 | libvpx | 1.11.0-2ubuntu2.3 |
| ubuntu 23.10 | libvpx | 1.12.0-1ubuntu2.1 |
| ubuntu 24.04 | libvpx | 1.14.0-1ubuntu2.1 |
References
- https://access.redhat.com/errata/RHSA-2024:9827
- https://access.redhat.com/security/cve/CVE-2024-5197
- https://bugzilla.redhat.com/2291198
- https://bugzilla.redhat.com/show_bug.cgi?id=2291198
- https://creativecommons.org/licenses/by/4.0/
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-5197
- https://errata.almalinux.org/9/ALSA-2024-9827.html
- https://errata.rockylinux.org/RLSA-2024:9827
All 16 references
- https://g-issues.chromium.org/issues/332382766
- https://linux.oracle.com/cve/CVE-2024-5197.html
- https://linux.oracle.com/errata/ELSA-2024-9827.html
- https://lists.debian.org/debian-lts-announce/2024/06/msg00005.html
- https://nvd.nist.gov/vuln/detail/CVE-2024-5197
- https://ubuntu.com/security/notices/USN-6814-1
- https://ubuntu.com/security/notices/USN-7249-1
- https://www.cve.org/CVERecord?id=CVE-2024-5197