Known vulnerabilities in libvpx (Red Hat package)

Vendor: Red Hat Inc.
Software: libvpx (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:libvpx_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 10
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libvpx (Red Hat package) libvpx (Red Hat package) is affected by 10 known vulnerabilities: 1 critical, 4 high, 2 medium, 3 low Critical High Medium Low

Vulnerabilities (10)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU122970 - Heap-based Buffer Overflow
CVE-2026-2447		 CWE-122 High
No
No
 1.3.0-8.el7_9.3, 1.7.0-8.el8_2.2, 1.7.0-10.el8_4.2, 1.7.0-10.el8_8.2, 1.7.0-13.el8_10, 1.9.0-7.el9_0.3, 1.9.0-7.el9_2.3, 1.9.0-7.el9_4.3, 1.9.0-10.el9_7, 1.14.1-3.el10_0.1 16.02.2026 SB20260216163
SB20260216169
SB2026022003
and 43 more
#VU94130 - Heap-based Buffer Overflow
CVE-2023-6349		 CWE-122 High
No
No
 1.7.0-11.el8_10 11.07.2024 SB2023092851
SB20240711192
SB20240711244
and 5 more
#VU90121 - Integer overflow
CVE-2024-5197		 CWE-190 High
No
No
 1.7.0-11.el8_10, 1.9.0-7.el9_0.2, 1.9.0-7.el9_2.2, 1.9.0-7.el9_4.2, 1.9.0-8.el9_5 31.05.2024 SB2024053145
SB2024060640
SB2024061506
and 14 more
#VU81244 - Heap-based Buffer Overflow
CVE-2023-5217		 CWE-122 Critical
Available
Exploited
 1.7.0-8.el8_1, 1.7.0-8.el8_2, 1.7.0-10.el8_4, 1.7.0-10.el8_6, 1.7.0-10.el8_8, 1.9.0-7.el9_0, 1.9.0-7.el9_2 27.09.2023 SB2023092804
SB2023092847
SB2023092851
and 101 more
#VU33340 - Out-of-bounds read
CVE-2020-0034		 CWE-125 Medium
No
No
 1.3.0-8.el7 10.03.2020 SB2020031069
SB2020052311
SB2020032664
and 4 more
#VU24676 - Double Free
CVE-2019-2126		 CWE-415 High
No
No
 1.7.0-8.el8 27.01.2020 SB2019082018
SB2019092728
SB2020012713
and 4 more
#VU23106 - Resource exhaustion
CVE-2019-9371		 CWE-400 Low
No
No
 1.7.0-8.el8 29.11.2019 SB2019092728
SB2019112910
SB2020012713
and 5 more
#VU23105 - Improper input validation
CVE-2019-9433		 CWE-20 Low
No
No
 1.3.0-8.el7, 1.7.0-8.el8 29.11.2019 SB2019092728
SB2019112910
SB2020012713
and 7 more
#VU23103 - Out-of-bounds read
CVE-2019-9232		 CWE-125 Low
No
No
 1.3.0-8.el7, 1.7.0-8.el8 29.11.2019 SB2019092728
SB2019112910
SB2020012713
and 7 more
#VU39839 - Improper input validation
CVE-2017-0393		 CWE-20 Medium
No
No
 1.3.0-8.el7 12.01.2017 SB2017011233
SB2020093044