CVE-2012-0823
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of...
CVE-2012-0823 is a medium vulnerability (CVSS 5.0) in Webmproject Libvpx, published February 23, 2012. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.50%, the 84th percentile. Fixed in libvpx 1.0.0-1.
- Severity
- 5.0 MediumCVSS 2.0, NVD
- Exploit chance
- 2.50%EPSS, 84th percentile
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
1.0.0-1libvpx +2 more
Description
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
Exploit likelihood
Affected products
Affected packages
What each source reports
NVD Score used
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
- Record
CVE-2012-0823- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-20
- Updated
- 2026-11-02
CVE ListNo score
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
- Record
CVE-2012-0823- Updated
- 2026-11-02
EUVDEUVD-2012-0849No score
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
- Record
EUVD-2012-0849- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-95hq-f353-7fq8No score
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of...
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
- Record
GHSA-95hq-f353-7fq8- Weakness
- CWE-20
- Updated
- 2026-11-02
OSVNo score
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
- Record
CVE-2012-0823- Updated
- 2026-11-02
OSVDEBIAN-CVE-2012-0823No score
VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".
- Record
DEBIAN-CVE-2012-0823- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
securityfocus.com/bid/51775
code.google.com/p/webm/source/browse/CHANGELOG?repo=libvpx
blog.webmproject.org/2012/01/vp8-codec-sdk-duclair-released.html
openwall.com/lists/oss-security/2012/01/30/2
mandriva.com/security/advisories?name=MDVSA-2012:023
nvd.nist.gov/vuln/detail/CVE-2012-0823
github.com/advisories/GHSA-95hq-f353-7fq8
security-tracker.debian.org/tracker/CVE-2012-0823