libaom (SUSE:Package Hub 15) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Package Hub 15 package libaom, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (7)

• CVE-2019-13962 — CVSS 9.8 (critical): lavc_CopyPicture in modules/codec/avcodec/video.c in VideoLAN VLC media player through 3.0.7 has a heap-based buffer over-read because it…
• CVE-2019-12874 — CVSS 9.8 (critical): An issue was discovered in zlib_decompress_extra in modules/demux/mkv/util.cpp in VideoLAN VLC media player 3.x through 3.0.7. The Matroska…
• CVE-2018-19857 — CVSS 9.1 (critical): The CAF demuxer in modules/demux/caf.c in VideoLAN VLC media player 3.0.4 may read memory from an uninitialized pointer when processing…
• CVE-2019-13602 — CVSS 7.8 (high): An Integer Underflow in MP4_EIA608_Convert() in modules/demux/mp4/mp4.c in VideoLAN VLC media player through 3.0.7.1 allows remote…
• CVE-2019-5459 — CVSS 7.1 (high): An Integer underflow in VLC Media Player versions < 3.0.7 leads to an out-of-band read.
• CVE-2019-5439 — CVSS 6.5 (medium): A Buffer Overflow in VLC Media Player < 3.0.7 causes a crash which can possibly be further developed into a remote code execution exploit.
• CVE-2019-5460 — CVSS 5.5 (medium): Double Free in VLC versions <= 3.0.6 leads to a crash.