Home > Vulnerability Database > CVE-2023-44488

Mend.io Vulnerability Database

New vulnerability? Tell us about it!

CVE-2023-44488

Date: September 29, 2023

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

Language: C

Severity Score

7.5

Related Resources (13)

Url: https://nvd.nist.gov/vuln/detail/CVE-2023-44488

Url: https://github.com/webmproject/libvpx/releases/tag/v1.13.1

Url: https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html

Url: https://access.redhat.com/security/cve/CVE-2023-44488

Url: https://www.debian.org/security/2023/dsa-5518

Url: https://github.com/webmproject/libvpx/commit/df9fd9d5b7325060b2b921558a1eb20ca7880937

Url: https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223f

Url: https://bugzilla.redhat.com/show_bug.cgi?id=2241806

Url: https://security.gentoo.org/glsa/202310-04

Url: http://www.openwall.com/lists/oss-security/2023/09/30/4

Url: https://github.com/webmproject/libvpx/compare/v1.13.0...v1.13.1

Url: https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/

Url: https://www.mend.io/vulnerability-database/CVE-2023-44488

Severity Score

7.5

Weakness Type (CWE)

Improper Handling of Exceptional Conditions

CWE-755

CVSS v3.1

Base Score:	7.5
Attack Vector (AV):	NETWORK
Attack Complexity (AC):	LOW
Privileges Required (PR):	NONE
User Interaction (UI):	NONE
Scope (S):	UNCHANGED
Confidentiality (C):	NONE
Integrity (I):	NONE
Availability (A):	HIGH

Do you need more information?

Contact Us