VDB
DEBIAN-CVE-2015-4485
DEBIAN-CVE-2015-4485
PUBLISHED
CVSS 9.300000190734863 CRITICAL
Heap-based buffer overflow in the resize_context_buffers function in libvpx in Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 allows remote attackers to execute arbitrary code via malformed WebM video data.
Risk Scores
CVSS v4.0
9.300000190734863
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Debian:13 | libvpx | 0, 0, 0 |
| Debian:11 | libvpx | 0, 0, 0 |
| Debian:12 | libvpx | 0, 0, 0 |
| Debian:14 | libvpx | 0, 0, 0 |
Timeline
- Aug 16, 2015 CVE Published
- Apr 28, 2026 CVE Updated