Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/libvpx@1.9.0-1%2Bdeb11u3
purl pkg:deb/debian/libvpx@1.9.0-1%2Bdeb11u3
Next non-vulnerable version 1.12.0-1+deb12u4
Latest non-vulnerable version 1.12.0-1+deb12u4
Risk 4.5
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-8vka-qus2-tbhj
Aliases:
CVE-2026-2447
Heap buffer overflow in libvpx. This vulnerability affects Firefox < 147.0.4, Firefox ESR < 140.7.1, Firefox ESR < 115.32.1, Thunderbird < 140.7.2, and Thunderbird < 147.0.2.
1.12.0-1+deb12u4
Affected by 0 other vulnerabilities.
VCID-98mt-7srw-qfh4
Aliases:
CVE-2025-5283
A vulnerability has been discovered in libvpx, which could lead to execution of arbitrary code.
1.12.0-1+deb12u4
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (8)
Vulnerability Summary Aliases
VCID-59n6-fj5x-33gn Multiple vulnerabilities have been found in libvpx, the worst of which could result in the execution of arbitrary code. CVE-2019-9232
VCID-djwx-su1m-57h4 Multiple vulnerabilities have been found in libvpx, the worst of which could result in the execution of arbitrary code. CVE-2019-9433
VCID-f81v-9fv8-93cd Out-of-bounds Write Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) CVE-2023-5217
GHSA-qqvq-6xgj-jw8g
VCID-kuxu-ty5p-8qbf libvpx: Heap buffer overflow related to VP9 encoding CVE-2023-6349
VCID-mcab-z6qn-gkds Multiple vulnerabilities have been discovered in libvpx, the worst of which could result in arbitrary code execution. CVE-2023-44488
VCID-txwy-bkhg-9qfv Multiple vulnerabilities have been found in libvpx, the worst of which could result in the execution of arbitrary code. CVE-2019-9325
VCID-ut2r-gvwc-4ydu Multiple vulnerabilities have been found in libvpx, the worst of which could result in the execution of arbitrary code. CVE-2019-9371
VCID-veqq-773w-1ba9 libvpx: Integer overflow in vpx_img_alloc() CVE-2024-5197

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-16T00:38:59.241144+00:00 Debian Oval Importer Fixing VCID-djwx-su1m-57h4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:22:21.061386+00:00 Debian Oval Importer Fixing VCID-txwy-bkhg-9qfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-16T00:17:51.978396+00:00 Debian Oval Importer Fixing VCID-ut2r-gvwc-4ydu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:59:42.742650+00:00 Debian Oval Importer Fixing VCID-kuxu-ty5p-8qbf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T23:31:28.114062+00:00 Debian Oval Importer Fixing VCID-f81v-9fv8-93cd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T21:30:35.139322+00:00 Debian Oval Importer Fixing VCID-59n6-fj5x-33gn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T20:06:44.795716+00:00 Debian Oval Importer Affected by VCID-98mt-7srw-qfh4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T16:16:29.537530+00:00 Debian Oval Importer Fixing VCID-veqq-773w-1ba9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:40:39.587811+00:00 Debian Oval Importer Affected by VCID-8vka-qus2-tbhj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-15T15:18:17.941496+00:00 Debian Oval Importer Fixing VCID-mcab-z6qn-gkds https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.4.0
2026-04-12T00:11:54.220986+00:00 Debian Oval Importer Fixing VCID-djwx-su1m-57h4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:55:53.594043+00:00 Debian Oval Importer Fixing VCID-txwy-bkhg-9qfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:51:30.818174+00:00 Debian Oval Importer Fixing VCID-ut2r-gvwc-4ydu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:33:54.726807+00:00 Debian Oval Importer Fixing VCID-kuxu-ty5p-8qbf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T23:06:42.812174+00:00 Debian Oval Importer Fixing VCID-f81v-9fv8-93cd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T21:09:40.430768+00:00 Debian Oval Importer Fixing VCID-59n6-fj5x-33gn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T19:48:20.311934+00:00 Debian Oval Importer Affected by VCID-98mt-7srw-qfh4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T16:03:49.847989+00:00 Debian Oval Importer Fixing VCID-veqq-773w-1ba9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:28:29.330902+00:00 Debian Oval Importer Affected by VCID-8vka-qus2-tbhj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-11T15:06:35.069555+00:00 Debian Oval Importer Fixing VCID-mcab-z6qn-gkds https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.3.0
2026-04-08T23:42:57.396761+00:00 Debian Oval Importer Fixing VCID-djwx-su1m-57h4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:27:40.776728+00:00 Debian Oval Importer Fixing VCID-txwy-bkhg-9qfv https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:23:31.287239+00:00 Debian Oval Importer Fixing VCID-ut2r-gvwc-4ydu https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T23:06:37.496752+00:00 Debian Oval Importer Fixing VCID-kuxu-ty5p-8qbf https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T22:40:24.791381+00:00 Debian Oval Importer Fixing VCID-f81v-9fv8-93cd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T20:48:41.247461+00:00 Debian Oval Importer Fixing VCID-59n6-fj5x-33gn https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T19:31:01.209369+00:00 Debian Oval Importer Affected by VCID-98mt-7srw-qfh4 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:56:41.146941+00:00 Debian Oval Importer Fixing VCID-veqq-773w-1ba9 https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:22:50.632387+00:00 Debian Oval Importer Affected by VCID-8vka-qus2-tbhj https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0
2026-04-08T15:01:56.773735+00:00 Debian Oval Importer Fixing VCID-mcab-z6qn-gkds https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.1.0