Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:rpm/redhat/libvpx@1.7.0-10?arch=el8_6
purl pkg:rpm/redhat/libvpx@1.7.0-10?arch=el8_6
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-f81v-9fv8-93cd
Aliases:
CVE-2023-5217
GHSA-qqvq-6xgj-jw8g
Out-of-bounds Write Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High) There are no reported fixed by versions.
VCID-mcab-z6qn-gkds
Aliases:
CVE-2023-44488
Multiple vulnerabilities have been discovered in libvpx, the worst of which could result in arbitrary code execution. There are no reported fixed by versions.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T13:52:34.683702+00:00 RedHat Importer Affected by VCID-f81v-9fv8-93cd https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-5217.json 38.0.0
2026-04-01T13:52:31.885027+00:00 RedHat Importer Affected by VCID-mcab-z6qn-gkds https://access.redhat.com/hydra/rest/securitydata/cve/CVE-2023-44488.json 38.0.0