Lucene search

K
osvGoogleOSV:USN-6814-1
HistoryJun 06, 2024 - 4:43 p.m.

libvpx vulnerability

2024-06-0616:43:22
Google
osv.dev
1
libvpx
vulnerability
denial of service
code execution
xiantong hou
media files
remote attacker

5.9 Medium

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:L/VA:N/SA:N

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%

Xiantong Hou discovered that libvpx did not properly handle certain
malformed media files. If an application using libvpx opened a specially
crafted file, a remote attacker could cause a denial of service, or
possibly execute arbitrary code.

5.9 Medium

CVSS4

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

LOW

User Interaction

PASSIVE

CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:P/VC:L/SC:L/VI:H/SI:L/VA:N/SA:N

7.3 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.2%