Aomedia 15 CVEs across 3 Aomedia products. Browse Aomedia vulnerabilities, severities, and proof-of-concept exploits.
Aomedia products with known CVEs Aomedia CVEs — newest first CVE Severity Score Published Summary CVE-2025-48175Medium 4.52025-05-16 In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. CVE-2025-48174Medium 4.52025-05-16 In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. CVE-2024-5171Critical 9.82024-06-05 Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:
* Calling aom_… CVE-2023-6879Critical 9.02023-12-27 Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc(). CVE-2023-39616High 7.52023-08-29 AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h. CVE-2020-36135Medium 6.52021-12-02 AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c. CVE-2020-36134Medium 6.52021-12-02 AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c. CVE-2020-36133High 8.82021-12-02 AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h. CVE-2020-36131High 8.82021-12-02 AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c. CVE-2020-36130Medium 6.52021-12-02 AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c. CVE-2020-36129High 8.82021-12-02 AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c. CVE-2020-36407High 8.82021-07-01 libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. CVE-2021-30475Critical 9.82021-06-04 aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. CVE-2021-30474Critical 9.82021-06-02 aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free. CVE-2021-30473Critical 9.82021-05-06 aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.