libaom (SUSE:Linux Enterprise Module for Desktop Applications 15 SP3) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Linux Enterprise Module for Desktop Applications 15 SP3 package libaom, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2021-30474 — CVSS 9.8 (critical): aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free.
• CVE-2021-30475 — CVSS 9.8 (critical): aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow.
• CVE-2021-30473 — CVSS 9.8 (critical): aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
• CVE-2020-36131 — CVSS 8.8 (high): AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c.
• CVE-2020-36129 — CVSS 8.8 (high): AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c.
• CVE-2020-36135 — CVSS 6.5 (medium): AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
• CVE-2020-36130 — CVSS 6.5 (medium): AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c.