Aomedia
2 CVEs across 3 Aomedia products. Browse Aomedia vulnerabilities, severities, and proof-of-concept exploits.
Aomedia products with known CVEs
Aomedia CVEs — newest first| CVE | Severity | Score | Published | Summary |
|---|
CVE-2025-48175 | Medium | 4.5 | 2025-05-16 | In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. |
CVE-2025-48174 | Medium | 4.5 | 2025-05-16 | In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. |
CVE-2024-5171 | Critical | 9.8 | 2024-06-05 | Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:
* Calling aom_… |
CVE-2023-6879 | Critical | 9.0 | 2023-12-27 | Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc(). |
CVE-2023-39616 | High | 7.5 | 2023-08-29 | AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h. |
CVE-2020-36135 | Medium | 6.5 | 2021-12-02 | AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c. |
CVE-2020-36134 | Medium | 6.5 | 2021-12-02 | AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c. |
CVE-2020-36133 | High | 8.8 | 2021-12-02 | AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h. |
CVE-2020-36131 | High | 8.8 | 2021-12-02 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c. |
CVE-2020-36130 | Medium | 6.5 | 2021-12-02 | AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c. |
CVE-2020-36129 | High | 8.8 | 2021-12-02 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c. |
CVE-2020-36407 | High | 8.8 | 2021-07-01 | libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. |
CVE-2021-30475 | Critical | 9.8 | 2021-06-04 | aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. |
CVE-2021-30474 | Critical | 9.8 | 2021-06-02 | aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free. |
CVE-2021-30473 | Critical | 9.8 | 2021-05-06 | aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap. |