PatchTheCVElibbpg project vulnerabilities
Recent CVEs affecting libbpg project products. 5 tracked.
libbpg project has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2018-08-22. Highest priority: CVE-2018-12447 (score 58/100).
- CVE-2018-12447 HIGH 8.8 DOWNGRADE The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, ha
- CVE-2017-2575 MEDIUM 6.5 DOWNGRADE A vulnerability was found while fuzzing libbpg 0.9.7
- CVE-2017-14034 HIGH 8.8 DOWNGRADE The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.7 and other products, mi
- CVE-2017-13136 HIGH 8.8 DOWNGRADE The image_alloc function in bpgenc.c in libbpg 0.9.7 has an integer overflow, with a resultant invalid malloc
- CVE-2017-13135 HIGH 7.8 DOWNGRADE A NULL Pointer Dereference exists in VideoLAN x265, as used in libbpg 0.9.7 and other products, because the CU
FAQ
How do I fix libbpg project vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is libbpg project being exploited right now?
None of the tracked libbpg project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which libbpg project CVE should I patch first?
CVE-2018-12447 currently ranks highest (58/100): The restore_tqb_pixels function in hevc_filter.c in libavcodec, as used in libbpg 0.9.8 and other products, ha.