Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Mageia 9: libavif Important Buffer Overflow Advisory MGASA-2025-0257

mageia
Calendar Grey November 4, 2025
Dist Mageia Esm H88
Mageia 9 libavif security update addresses important integer and buffer overflow issues; patches available now!
MGASA-2025-0257 - Updated libavif packages fix security vulnerabilities

Summary

Description: In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. (CVE-2025-48174) In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. (CVE-2025-48175)

References

- https://bugs.mageia.org/show_bug.cgi?id=34336

- https://lists.debian.org/debian-security-announce/2025/msg00094.html

- https://www.cve.org/CVERecord?id=CVE-2025-48174

- https://www.cve.org/CVERecord?id=CVE-2025-48175

Topics%20covered

Topics Covered

security advisory buffer overflow important integer overflow Mageia libavif

Resolution

SRPMS

- 9/core/libavif-0.11.1-1.1.mga9

Severity
important
Lowest
Low
Medium
High
Critical

Publication date: 04 Nov 2025
URL: https://advisories.mageia.org/MGASA-2025-0257.html
Type: security
CVE: CVE-2025-48174, CVE-2025-48175

Topics%20covered

Topics Covered

security advisory buffer overflow important integer overflow Mageia libavif

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here