CVE catalog

CVE-2023-44488

libvpx: CVE-2023-44488

[CVE catalog]

Severity
High · CVSS 7.5CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Published
Source
[NVD] · [CVE record]
EPSS
2.16% · Oct 25, 2026

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debianlibvpxsid1.17.0-1fixed
Debianlibvpxforky1.17.0-1fixed
Debianlibvpxtrixie1.15.0-2.1+deb13u1fixed
Debianlibvpxtrixie-security1.15.0-2.1+deb13u1fixed
Debianlibvpxbookworm1.12.0-1+deb12u5fixed
Debianlibvpxbookworm-security1.12.0-1+deb12u5fixed
Ubuntulibvpxpro1.4.0-4vulnerable
Ubuntulibvpxpro1.5.0-2vulnerable
Ubuntulibvpxpro1.5.0-2ubuntu1vulnerable
Ubuntulibvpxpro1.5.0-2ubuntu1.1vulnerable
Ubuntulibvpxpro1.5.0-2ubuntu1.1+esm1vulnerable
Ubuntulibvpxpro1.5.0-2ubuntu1.1+esm2fixed
Ubuntulibvpxpro1.6.1-3vulnerable
Ubuntulibvpxpro1.7.0-3vulnerable
Ubuntulibvpxpro1.7.0-3ubuntu0.18.04.1vulnerable
Ubuntulibvpxpro1.7.0-3ubuntu0.18.04.1+esm1fixed
Ubuntulibvpx20.041.8.1-2vulnerable
Ubuntulibvpx20.041.8.2-1vulnerable
Ubuntulibvpx20.041.8.2-1build1vulnerable
Ubuntulibvpx20.041.8.2-1ubuntu0.2fixed
Ubuntulibvpx22.041.9.0-1ubuntu1vulnerable
Ubuntulibvpx22.041.11.0-2ubuntu1vulnerable
Ubuntulibvpx22.041.11.0-2ubuntu2vulnerable
Ubuntulibvpx22.041.11.0-2ubuntu2.2fixed
Ubuntulibvpxpro1.6.1-3vulnerable
Ubuntulibvpxpro1.7.0-3vulnerable
Ubuntulibvpxpro1.7.0-3ubuntu0.18.04.1vulnerable
Ubuntulibvpxpro1.7.0-3ubuntu0.18.04.1+esm1fixed
Ubuntumozjs5218.0452.3.1-0ubuntu3vulnerable
Ubuntumozjs5218.0452.3.1-7fakesync1vulnerable
Ubuntumozjs5218.0452.8.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs5218.0452.9.1-0ubuntu0.18.04.1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu1vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu3vulnerable
Ubuntumozjs3818.0438.8.0~repack1-0ubuntu4vulnerable
Ubuntufirefox20.0469.0.3+build1-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0470.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0470.0.1+build1-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0471.0+build5-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0472.0.2+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0473.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0473.0.1+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build1-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu1vulnerable
Ubuntufirefox20.0474.0+build2-0ubuntu2vulnerable
Ubuntufirefox20.0474.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0475.0+build3-0ubuntu1vulnerable
Ubuntufirefox20.0476.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0476.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0477.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0478.0.2+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0479.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0480.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0481.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0482.0.3+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0483.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0484.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0485.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0486.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0487.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0488.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0488.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0489.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0489.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0490.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0491.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0492.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0493.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0494.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0495.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0496.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0497.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0+build3-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.0498.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0498.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.0499.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04100.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04100.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04101.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04102.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04103.0+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04104.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04105.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04106.0.5+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04107.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04108.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04109.0.1+build1-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04110.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04110.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04111.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04112.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04113.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0+build3-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.1+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04114.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04115.0+build2-0ubuntu0.20.04.3vulnerable
Ubuntufirefox20.04115.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0+build2-0ubuntu0.20.04.2vulnerable
Ubuntufirefox20.04116.0.2+build1-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04116.0.3+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04117.0.1+build2-0ubuntu0.20.04.1vulnerable
Ubuntufirefox20.04118.0.1+build1-0ubuntu0.20.04.1fixed
Ubuntulibvpx20.041.8.1-2vulnerable
Ubuntulibvpx20.041.8.2-1vulnerable
Ubuntulibvpx20.041.8.2-1build1vulnerable
Ubuntulibvpx20.041.8.2-1ubuntu0.2fixed
Ubuntumozjs6820.0468.5.0-1~fakesyncvulnerable
Ubuntumozjs6820.0468.5.0-2~fakesyncvulnerable
Ubuntumozjs6820.0468.6.0-1vulnerable
Ubuntumozjs6820.0468.6.0-1ubuntu1vulnerable
Ubuntumozjs5220.0452.9.1-1build1vulnerable
Ubuntumozjs5220.0452.9.1-1ubuntu3vulnerable
Ubuntulibvpx22.041.9.0-1ubuntu1vulnerable
Ubuntulibvpx22.041.11.0-2ubuntu1vulnerable
Ubuntulibvpx22.041.11.0-2ubuntu2vulnerable
Ubuntulibvpx22.041.11.0-2ubuntu2.2fixed
Ubuntumozjs10222.04102.11.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.12.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.13.0-0ubuntu0.22.04.1vulnerable
Ubuntumozjs10222.04102.15.1-0ubuntu0.22.04.1vulnerable
Ubuntumozjs7822.0478.13.0-1vulnerable
Ubuntumozjs7822.0478.15.0-2vulnerable
Ubuntumozjs7822.0478.15.0-4ubuntu1vulnerable
Ubuntumozjs9122.0491.5.1-0ubuntu1vulnerable
Ubuntumozjs9122.0491.6.0-1vulnerable
Ubuntumozjs9122.0491.6.0-2vulnerable
Ubuntumozjs9122.0491.7.0-2vulnerable
Ubuntumozjs9122.0491.10.0-0ubuntu1vulnerable
Ubuntulibvpx24.041.12.0-1ubuntu2fixed
Ubuntumozjs10224.04102.15.1-1vulnerable
Ubuntumozjs10224.04102.15.1-3ubuntu2vulnerable
Suselibvpxlinux enterprise module for basesystem 15 sp51.11.0-150400.3.7.1fixed
Suselibvpxlinux enterprise module for basesystem 15 sp61.11.0-150400.3.7.1fixed
Suselibvpxlinux enterprise module for package hub 15 sp51.11.0-150400.3.7.1fixed
Suselibvpxlinux enterprise module for package hub 15 sp61.11.0-150400.3.7.1fixed
Suselibvpxlinux enterprise high performance computing 15 sp4-espos1.11.0-150400.3.7.1fixed
Suselibvpxlinux enterprise high performance computing 15 sp4-ltss1.11.0-150400.3.7.1fixed
Suselibvpxlinux enterprise server 15 sp4-ltss1.11.0-150400.3.7.1fixed
Suselibvpxlinux enterprise server for sap applications 15 sp41.11.0-150400.3.7.1fixed
Suselibvpxmanager proxy 4.31.11.0-150400.3.7.1fixed
Suselibvpxmanager server 4.31.11.0-150400.3.7.1fixed
Opensuselibvpxleap 15.51.11.0-150400.3.7.1fixed
Opensuselibvpxleap 15.61.11.0-150400.3.7.1fixed

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debianlibvpxsourcesid1.12.0-1.2not yet assignedNot reportedNot reported
Debianlibvpxsourceforky1.12.0-1.2not yet assignedNot reportedNot reported
Debianlibvpxsourcetrixie1.12.0-1.2not yet assignedNot reportedNot reported
Debianlibvpxsourcebookworm1.12.0-1+deb12u2not yet assignedNot reportedNot reported
Ubuntulibvpxdebpro1.5.0-2ubuntu1.1+esm2Not reportedUSN-6403-3Not reported
Ubuntulibvpxdebpro1.7.0-3ubuntu0.18.04.1+esm1Not reportedUSN-6403-2Not reported
Ubuntulibvpxdeb20.041.8.2-1ubuntu0.2Not reportedUSN-6403-1Not reported
Ubuntulibvpxdeb22.041.11.0-2ubuntu2.2Not reportedUSN-6403-1Not reported
Ubuntulibvpxdebpro1.7.0-3ubuntu0.18.04.1+esm1Not reportedUBUNTU-CVE-2023-44488Not reported
Ubuntufirefoxdeb20.04118.0.1+build1-0ubuntu0.20.04.1Not reportedUBUNTU-CVE-2023-44488Not reported
Ubuntulibvpxdeb20.041.8.2-1ubuntu0.2Not reportedUBUNTU-CVE-2023-44488Not reported
Ubuntulibvpxdeb22.041.11.0-2ubuntu2.2Not reportedUBUNTU-CVE-2023-44488Not reported
Ubuntulibvpxdeb24.041.12.0-1ubuntu2Not reportedUBUNTU-CVE-2023-44488Not reported
Suselibvpxrpmlinux enterprise module for basesystem 15 sp51.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmlinux enterprise module for basesystem 15 sp61.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmlinux enterprise module for package hub 15 sp51.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmlinux enterprise module for package hub 15 sp61.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmlinux enterprise high performance computing 15 sp4-espos1.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmlinux enterprise high performance computing 15 sp4-ltss1.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmlinux enterprise server 15 sp4-ltss1.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmlinux enterprise server for sap applications 15 sp41.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmmanager proxy 4.31.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Suselibvpxrpmmanager server 4.31.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Opensuselibvpxrpmleap 15.51.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported
Opensuselibvpxrpmleap 15.61.11.0-150400.3.7.1Not reportedSUSE-SU-2024:2409-1Not reported

OpenFactory catalog packages

Matching against OpenFactory catalog package versions is in progress.

References