VDB
BDU%3A2025-00491
BDU%3A2025-00491
PUBLISHED
CVSS 10 CRITICAL
Уязвимость функции av1_loop_restoration_dealloc() библиотеки кодирования видео libaom, позволяющая нарушителю выполнить произвольный код
Risk Scores
CVSS 2.0
10
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Novell Inc., Сообщество свободного программного обеспечения, ООО «Ред Софт», Fedora Project, AOMedia | OpenSUSE Leap, Debian GNU/Linux, РЕД ОС (запись в едином реестре российских программ №3751), SUSE Linux Enterprise Server for SAP Applications, SUSE Manager Retail Branch Server, SUSE Manager Proxy, SUSE Manager Server, Fedora, Suse Linux Enterprise Server, Suse Linux Enterprise Desktop, SUSE Linux Enterprise High Performance Computing, SUSE Linux Enterprise Module for Basesystem, SUSE Linux Enterprise Real Time, libaom |
Timeline
- Jan 20, 2025 CVE Published
- Jul 2, 2025 CVE Updated
References
- https://security-tracker.debian.org/tracker/CVE-2023-6879 url
- https://aomedia.googlesource.com/aom/+/refs/tags/v3.7.1 url
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/ url
- https://redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-aom-cve-2023-6879/?sphrase_id=1075822 url
- https://www.suse.com/security/cve/CVE-2023-6879.html advisory
- https://aomedia.issues.chromium.org/issues/42302501 advisory
- https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/ advisory