Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -3 articles for you...
172
security advisorydenial of servicearbitrary code executionUbuntu 7397-1: AOM Security Advisory Updates
AOM could be made to crash or run programs if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-7397-1 March 31, 2025 aom vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 22.04 LTS - Ubuntu 20.04 LTS Summary: AOM could be made to crash or run programs if it opened a specially crafted file. Software Description: - aom: AV1 Video Codec Library Details: Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 22.04 LTS aom-tools 3.3.0-1ubuntu0.1 libaom-dev 3.3.0-1ubuntu0.1 libaom3 3.3.0-1ubuntu0.1 Ubuntu 20.04 LTS aom-tools 1.0.0.errata1-3+deb11u1ubuntu0.1 libaom-dev 1.0.0.errata1-3+deb11u1ubuntu0.1 libaom0 1.0.0.errata1-3+deb11u1ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-7397-1 CVE-2024-5171 Package Information: https://launchpad.net/ubuntu/+source/aom/3.3.0-1ubuntu0.1 https://launchpad.net/ubuntu/+source/aom/1.0.0.errata1-3+deb11u1ubuntu0.1 . AOM vulnerability advisory for Ubuntu: critical update to prevent crashes or code execution from crafted files.. crash, programs, opened, specially, crafted, ==================. . Severity: Important. LinuxSecurity.com Team
Mar 31, 2025
•Important
Ubuntu
197
security advisorybuffer overflowDebianDebian 11 Bullseye: DLA-3881-1 Critical: aom Integer Overflow Fix
Integer overflows have been fixed in aom, an AV1 Codec Library. For Debian 11 bullseye, this problem has been fixed in version 1.0.0.errata1-3+deb11u2. . - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3881-1
Sep 07, 2024
•Critical
Debian LTS
203
security advisorymoderatebuffer overflowMageia 9 MGASA-2024-0220: Moderate AOM Buffer Overflow Risk
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may . MGASA-2024-0220 - Updated aom packages fix security vulnerability Publication date: 14 Jun 2024 URL: https://advisories.mageia.org/MGASA-2024-0220.html Type: security Affected Mageia releases: 9 CVE: CVE-2024-5171 Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. (CVE-2024-5171) References: - https://bugs.mageia.org/show_bug.cgi?id=33280 - https://ubuntu.com/security/notices/USN-6815-1 - https://www.cve.org/CVERecord?id=CVE-2024-5171 SRPMS: - 9/core/aom-3.6.0-1.1.mga9 . The latest aom packages have addressed critical security vulnerabilities arising from integer overflow, which may lead to buffer overflow threats in Mageia.. integer Overflow, buffer Overflow, libaom security, Mageia Advisory. . LinuxSecurity.com Team
Jun 14, 2024
Mageia
172
security advisorydenial of servicecriticalUbuntu 24.04 LTS USN-6815-1 Critical: AOM Denial of Service Risk
AOM could be made to crash or run programs if it opened a specially crafted file.. ========================================================================== Ubuntu Security Notice USN-6815-1 June 06, 2024 aom vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu 24.04 LTS Summary: AOM could be made to crash or run programs if it opened a specially crafted file. Software Description: - aom: AV1 Video Codec Library Details: Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code. Update instructions: The problem can be corrected by updating your system to the following package versions: Ubuntu 24.04 LTS libaom3 3.8.2-2ubuntu0.1 In general, a standard system update will make all the necessary changes. References: https://ubuntu.com/security/notices/USN-6815-1 CVE-2024-5171 Package Information: https://launchpad.net/ubuntu/+source/aom/3.8.2-2ubuntu0.1 . A critical flaw enables remote crashes or arbitrary code execution in Ubuntu 24.04 LTS. Ensure your systems are patched promptly.. AOM Security Advisory, Ubuntu 24.04, Crash Risk, Denial of Service, Code Execution. . Severity: Critical. LinuxSecurity.com Team
Jun 06, 2024
•Critical
Ubuntu
197
security advisorydenial of servicebuffer overflowDebian 10 Buster DLA-3556-1 Critical: AOM Buffer Overflow and DoS
Multiple security vulnerabilities have been discovered in aom, the AV1 Video Codec Library. Buffer overflows, use-after-free and NULL pointer dereferences may cause a denial of service or other unspecified impact if a malformed multimedia file is processed. . ------------------------------------------------------------------------- Debian LTS Advisory DLA-3556-1
Sep 05, 2023
•Critical
Debian LTS
87
security advisorydenial of servicebuffer overflowDebian 11 DSA-5490-1 Critical: AOM Buffer Overflow Risk
Multiple security vulnerabilities have been discovered in aom, the AV1 Video Codec Library. Buffer overflows, use-after-free and NULL pointer dereferences may cause a denial of service or other unspecified impact if a malformed multimedia file is processed. . -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-5490-1
Sep 05, 2023
•Critical
Debian
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!