Libavif

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2025-48175 May 16, 05:15 MEDIUM POC PATCH Monitor

In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. Rated medium severity (CVSS 4.5), this vulnerability is no authentication required. Public exploit code available.

Buffer Overflow Integer Overflow Suse Libavif Aomedia

NVD GitHub

CVSS 3.1

4.5

EPSS

0.3%

CVE-2025-48174 May 16, 05:15 MEDIUM PATCH Monitor

In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. Rated medium severity (CVSS 4.5), this vulnerability is no authentication required.

Buffer Overflow Integer Overflow Suse Libavif Aomedia

NVD GitHub

CVSS 3.1

4.5

EPSS

0.4%

CVE-2025-48175

EPSS 0% CVSS 4.5

MEDIUM POC PATCH Monitor

Buffer Overflow Integer Overflow Suse +2

NVD GitHub

CVE-2025-48174

EPSS 0% CVSS 4.5

MEDIUM PATCH Monitor

Buffer Overflow Integer Overflow Suse +2

NVD GitHub