Known vulnerabilities in libvpx (Alpine package)

Known vulnerabilities in libvpx (Alpine package)

Vendor: Alpine Linux Development Team

Software: libvpx (Alpine package)

Software CPE: cpe:2.3:o:alpine:libvpx_alpine_package:*:*:*:*:*:alpine_linux:*:*

Website: https://alpinelinux.org/

Total vulnerabilities: 13

Public exploits: 2

Known exploited (KEV): 0

Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Vulnerabilities (13)

Vulnerability	CWE-ID	CSH Severity	Public Exploit	KEV	First fixed release	Published	Bulletins
#VU33340 - Out-of-bounds read CVE-2020-0034	CWE-125	Medium	No	No	-	10.03.2020	SB2020031069 SB2020052311 SB2020032664 and 4 more
#VU23106 - Resource exhaustion CVE-2019-9371	CWE-400	Low	No	No	-	29.11.2019	SB2019092728 SB2019112910 SB2020012713 and 5 more
#VU23105 - Improper input validation CVE-2019-9433	CWE-20	Low	No	No	-	29.11.2019	SB2019092728 SB2019112910 SB2020012713 and 7 more
#VU23104 - Out-of-bounds read CVE-2019-9325	CWE-125	Low	No	No	-	29.11.2019	SB2019092728 SB2019112910 SB2020012713 and 4 more
#VU23103 - Out-of-bounds read CVE-2019-9232	CWE-125	Low	No	No	-	29.11.2019	SB2019092728 SB2019112910 SB2020012713 and 7 more
#VU33120 - Heap-based Buffer Overflow CVE-2011-2911	CWE-122	Medium	No	No	1.0.0-r0	07.06.2012	SB2012022803 SB2012031601 SB2012031602
#VU33121 - Stack-based buffer overflow CVE-2011-2912	CWE-121	Medium	No	No	1.0.0-r0	07.06.2012	SB2012022804 SB2012031601 SB2012031602
#VU33954 - Improper input validation CVE-2011-2913	CWE-20	Medium	No	No	1.0.0-r0	07.06.2012	SB2012022805 SB2012031601 SB2012031602
#VU33955 - Improper input validation CVE-2011-2914	CWE-20	Medium	No	No	1.0.0-r0	07.06.2012	SB2012022806 SB2012031601 SB2012031602
#VU33956 - Improper input validation CVE-2011-2915	CWE-20	Medium	No	No	1.0.0-r0	07.06.2012	SB2012022807 SB2012031601 SB2012031602
#VU33119 - Improper input validation CVE-2011-1761	CWE-20	Medium	Available	No	1.0.0-r0	07.06.2012	SB2012022802 SB2011050904
#VU32821 - Improper input validation CVE-2012-0823	CWE-20	Low	No	No	1.0.0-r0	23.02.2012	SB2012022301 SB2012031309 SB2012031310 and 2 more
#VU33122 - Improper input validation CVE-2012-0840	CWE-20	Medium	Available	No	1.0.0-r0	10.02.2012	SB2012022808