CVE-2025-48175 PUBLISHED CVSS 4.5 MEDIUM

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.

EPSS 0.34% · 56.9th percentile

Risk Scores

CVSS v3.1
4.5
CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:L/A:L
EPSS Score
0.34%
56.9th percentile

Affected Products

VendorProductVersions
aomedialibavif0, 0, 0

Timeline

References

Open in Interactive Console →