Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 498
Alerts This Week
Warning Icon 1 498

Ubuntu 7397-1: AOM Security Advisory Updates

ubuntu
Calendar Grey March 31, 2025
Scroller Ubuntu
AOM vulnerability advisory for Ubuntu: critical update to prevent crashes or code execution from crafted files.
AOM could be made to crash or run programs if it opened a specially crafted file.

Summary

AOM could be made to crash or run programs if it opened a specially crafted

file.

Software Description:

- aom: AV1 Video Codec Library

Details:

Xiantong Hou discovered that AOM did not properly handle certain malformed

media files. If an application using AOM opened a specially crafted file, a

remote attacker could cause a denial of service, or possibly execute

arbitrary code.

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution ubuntu aom

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 22.04 LTS
   aom-tools                       3.3.0-1ubuntu0.1
   libaom-dev                      3.3.0-1ubuntu0.1
   libaom3                         3.3.0-1ubuntu0.1

Ubuntu 20.04 LTS
   aom-tools                       1.0.0.errata1-3+deb11u1ubuntu0.1
   libaom-dev                      1.0.0.errata1-3+deb11u1ubuntu0.1
   libaom0                         1.0.0.errata1-3+deb11u1ubuntu0.1

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-7397-1

  CVE-2024-5171

Severity
important
Lowest
Low
Medium
High
Critical

Topics%20covered

Topics Covered

security advisory denial of service arbitrary code execution ubuntu aom

Package Information

https://launchpad.net/ubuntu/+source/aom/3.3.0-1ubuntu0.1
https://launchpad.net/ubuntu/+source/aom/1.0.0.errata1-3+deb11u1ubuntu0.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.