Every CVE Search/ Get API key

CVE-2024-5171

heap buffer overflow in libaom

10.0 CriticalFix available

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

1.26%Up 1.2 points since Jun 6, 2024
90%50%10%1%

What each source reports

CVE List Score used 10.0

heap buffer overflow in libaom

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
CVE-2024-5171
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2024-46420 10.0

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
EUVD-2024-46420
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-592c-fmq9-g63c 10.0

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow....

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
GHSA-592c-fmq9-g63c
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20, CWE-190
Updated
2026-11-02
NVD 10.0

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
CVE-2024-5171
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20, CWE-190
Updated
2026-11-02
OSVALPINE-CVE-2024-5171 9.8

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
ALPINE-CVE-2024-5171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVAZL-62420 9.8

CVE-2024-5171 affecting package libao 1.2.0-24

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
AZL-62420
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-05
Show 14 moreShow less
OSVBELL-CVE-2024-5171 9.8
Record
BELL-CVE-2024-5171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 9.8

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
CVE-2024-5171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2024-5171 9.8

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.

Record
DEBIAN-CVE-2024-5171
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVJLSEC-2026-122 10.0

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Record
JLSEC-2026-122
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2024-1949 9.8

aom security update

The Alliance for Open Media’s focus is to deliver a next-generation video format that is:

Security Fix(es):

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.(CVE-2024-5171)
Record
OESA-2024-1949
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2776 9.8

aom security update

The Alliance for Open Media’s focus is to deliver a next-generation video format that is:

Security Fix(es):

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.(CVE-2024-5171)
Record
OESA-2026-2776
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-2779 9.8

aom security update

The Alliance for Open Media’s focus is to deliver a next-generation video format that is:

Security Fix(es):

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:

  • Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
  • Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.(CVE-2024-5171)
Record
OESA-2026-2779
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2024-5171 10.0

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.

Record
UBUNTU-CVE-2024-5171
CVSS 4.0
10.0 CriticalCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVMGASA-2024-0220 No score

Updated aom packages fix security vulnerability

Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. (CVE-2024-5171)

Record
MGASA-2024-0220
Updated
2026-11-02
OSVSUSE-SU-2024:2030-1 No score

Security update for libaom

This update for libaom fixes the following issues:

  • CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020).
Record
SUSE-SU-2024:2030-1
Updated
2026-11-02
OSVSUSE-SU-2024:2052-1 No score

Security update for libaom

This update for libaom fixes the following issues:

  • CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020).
Record
SUSE-SU-2024:2052-1
Updated
2026-11-02
OSVSUSE-SU-2024:2056-1 No score

Security update for libaom

This update for libaom fixes the following issues:

  • CVE-2024-5171: Fixed heap buffer overflow in img_alloc_helper() caused by integer overflow (bsc#1226020).
Record
SUSE-SU-2024:2056-1
Updated
2026-11-02
OSVUSN-6815-1 No score

aom vulnerability

Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.

Record
USN-6815-1
Updated
2026-11-02
OSVUSN-7397-1 No score

aom vulnerability

Xiantong Hou discovered that AOM did not properly handle certain malformed media files. If an application using AOM opened a specially crafted file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.

Record
USN-7397-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
aom
Alpine:v3.20
 before 3.9.1-r0
3.9.1-r0
aom
Alpine:v3.21
 before 3.9.1-r0
3.9.1-r0
aom
Alpine:v3.22
 before 3.9.1-r0
3.9.1-r0
aom
Alpine:v3.23
 before 3.9.1-r0
3.9.1-r0
aom
Alpine:v3.24
 before 3.9.1-r0
3.9.1-r0
libao
Azure Linux:3
 through 1.2.0-24 None known
aom
Alpaquita:23
 3.5.0-r0 up to 3.7.2-r0
3.7.2-r0
aom
Alpaquita:stream
 3.5.0-r0 up to 3.9.0-r0
3.9.0-r0
aom
BellSoft Hardened Containers:23
 3.5.0-r0 up to 3.7.2-r0
3.7.2-r0
aom
BellSoft Hardened Containers:stream
 3.5.0-r0 up to 3.9.0-r0
3.9.0-r0
Show 30 moreShow less
Affected packages
PackageAffectedFixed
aom
Debian:12
 before 3.6.0-1+deb12u1, plus listed versions
3.6.0-1
3.6.0-1+deb12u1
aom
Debian:13
 before 3.8.2-3
3.8.2-3
aom
Debian:14
 before 3.8.2-3
3.8.2-3
aom
Debian:11
 before 1.0.0.errata1-3+deb11u2, plus listed versions
1.0.0.errata1-31.0.0.errata1-3+deb11u1
1.0.0.errata1-3+deb11u2
libaom_jll
Julia
 before 3.11.0+0
3.11.0+0
aom
Mageia:9
 before 3.6.0-1.1.mga9
3.6.0-1.1.mga9
aom
openEuler:24.03-LTS
 before 3.8.0-2.oe2403
3.8.0-2.oe2403
aom
openEuler:22.03-LTS-SP4
 before 1.0.0-2.oe2203sp4
1.0.0-2.oe2203sp4
aom
openEuler:20.03-LTS-SP4
 before 1.0.0-2.oe2003sp4
1.0.0-2.oe2003sp4
libaom
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.0.0-150200.3.18.1
1.0.0-150200.3.18.1
libaom
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.0.0-150200.3.18.1
1.0.0-150200.3.18.1
libaom
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.0.0-150200.3.18.1
1.0.0-150200.3.18.1
libaom
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.0.0-150200.3.18.1
1.0.0-150200.3.18.1
libaom
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.0.0-150200.3.18.1
1.0.0-150200.3.18.1
libaom
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.0.0-150200.3.18.1
1.0.0-150200.3.18.1
libaom
SUSE:Enterprise Storage 7.1
 before 1.0.0-150200.3.18.1
1.0.0-150200.3.18.1
libaom
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
SUSE:Linux Enterprise Server 15 SP4-LTSS
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
SUSE:Linux Enterprise Server for SAP Applications 15 SP4
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
SUSE:Manager Proxy 4.3
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
SUSE:Manager Server 4.3
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
openSUSE:Leap 15.5
 before 3.2.0-150400.3.6.1
3.2.0-150400.3.6.1
libaom
SUSE:Linux Enterprise Module for Desktop Applications 15 SP6
 before 3.7.1-150600.3.3.1
3.7.1-150600.3.3.1
libaom
openSUSE:Leap 15.6
 before 3.7.1-150600.3.3.1
3.7.1-150600.3.3.1
libaom-devel-doc
openSUSE:Leap 15.6
 before 3.7.1-150600.3.3.1
3.7.1-150600.3.3.1
aom
Ubuntu:20.04:LTS
 before 1.0.0.errata1-3+deb11u1ubuntu0.1, plus listed versions
1.0.0-31.0.0.errata1-21.0.0.errata1-2ubuntu31.0.0.errata1-31.0.0.errata1-3build11.0.0.errata1-3+deb11u1build0.20.04.1
1.0.0.errata1-3+deb11u1ubuntu0.1
aom
Ubuntu:22.04:LTS
 before 3.3.0-1ubuntu0.1, plus listed versions
1.0.0.errata1-3build13.2.0-23.3.0-1
3.3.0-1ubuntu0.1
aom
Ubuntu:24.04:LTS
 before 3.8.2-2ubuntu0.1, plus listed versions
3.6.1-13.7.0-13.7.1-13.8.1-13.8.2-2build1
3.8.2-2ubuntu0.1

History

History
RecordedChangedSources
factsOSV
first indexedCVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2024-5171 is a critical vulnerability (CVSS 10.0) in Aomedia Libaom, published June 4, 2024. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.26%, the 69th percentile. Fixed in aom 3.9.1-r0.

References

Show 17 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open