CVE-2023-44488 (HIGH 7.5) · Watchpost

← All vulnerabilities

CVE-2023-44488

HIGH 7.5CVE-2023-44488 · Published 30/09/2023 · updated 17/06/2026

Package	Affected versions	Patched versions
libvpx webmproject	`< 1.13.1`	`1.13.1`

Description

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

References

openwall.com/lists/oss-security/2023/09/30/4 · Mailing List
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
webmproject/libvpx commit 263682c · Patch
webmproject/libvpx commit df9fd9d · Patch
webmproject/libvpx · Patch
webmproject/libvpx release v1.13.1 · Release Notes
lists.debian.org/debian-lts-announce/2023/10/msg00001.html · Mailing List
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB · Mailing List
security.gentoo.org/glsa/202310-04 · Third Party Advisory
debian.org/security/2023/dsa-5518 · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free