PatchTheCVElibbpg vulnerabilities and fixes
Recent CVEs affecting libbpg, with upgrade or downgrade steps. 8 tracked.
libbpg has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-22. Highest priority: CVE-2018-12447 (score 58/100).
- CVE-2018-12447 HIGH 8.8 DOWNGRADE The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, ha
- CVE-2017-2575 MEDIUM 6.5 DOWNGRADE A vulnerability was found while fuzzing libbpg 0.9.7
- CVE-2017-14796 HIGH 8.8 DOWNGRADE The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service
- CVE-2017-14795 HIGH 8.8 DOWNGRADE The hevc_write_frame function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service
- CVE-2017-14734 HIGH 8.8 DOWNGRADE The build_msps function in libbpg.c in libbpg 0.9.7 allows remote attackers to cause a denial of service (heap
- CVE-2017-14034 HIGH 8.8 DOWNGRADE The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, mi
- CVE-2017-13136 HIGH 8.8 DOWNGRADE The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc
- CVE-2017-13135 HIGH 7.8 DOWNGRADE A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CU
FAQ
How do I fix libbpg vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libbpg being exploited right now?
None of the tracked libbpg CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libbpg CVE should I patch first?
CVE-2018-12447 currently ranks highest (58/100): The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, ha.