CVE-2019-9232

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

• libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126)

• libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)

• libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371)

• libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the Rocky Linux 8.3 Release Notes linked from the References section.

In libvpx, there is a possible out of bounds read due to a missing bounds check. This could lead to remote information disclosure with no additional execution privileges needed. User interaction is not needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-122675483

The libvpx packages provide the VP8 SDK, which allows the encoding and decoding of the VP8 video codec, commonly used with the WebM multimedia container file format.

Security Fix(es):

• libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc (CVE-2019-2126)

• libvpx: Out of bounds read in vp8_norm table (CVE-2019-9232)

• libvpx: Resource exhaustion after memory leak in mkvparser.cc (CVE-2019-9371)

• libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c (CVE-2019-9433)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

This update for libvpx fixes the following issues:

• CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611).
• CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612).
• CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613).
• CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614).
• CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615).

This update was imported from the SUSE:SLE-15:Update update project.

These are all security issues fixed in the libvpx-devel-1.10.0-1.3 package on the GA media of openSUSE Tumbleweed.

This update for libvpx fixes the following issues:

• CVE-2019-2126: Fixed a double free in ParseContentEncodingEntry() (bsc#1160611).
• CVE-2019-9325: Fixed an out-of-bounds read (bsc#1160612).
• CVE-2019-9232: Fixed an out-of-bounds memory access on fuzzed data (bsc#1160613).
• CVE-2019-9433: Fixed a use-after-free in vp8_deblock() (bsc#1160614).
• CVE-2019-9371: Fixed a resource exhaustion after memory leak (bsc#1160615).

This update for libvpx fixes the following issues:

• CVE-2019-9232: Fixed an out of bound memory access (bsc#1160613).
• CVE-2019-9433: Fixdd a use-after-free in vp8_deblock() (bsc#1160614).

It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.

USN-4199-1 fixed several vulnerabilities in libvpx. This update provides the corresponding update for Ubuntu 14.04 ESM.

Original advisory details:

It was discovered that libvpx did not properly handle certain malformed WebM media files. If an application using libvpx opened a specially crafted WebM file, a remote attacker could cause a denial of service, or possibly execute arbitrary code.