CVE-2023-6879

CRITICAL

aomedia < 3.7.1 - Heap Overflow via Multi-Threaded Video Frame Resolution Increase

Title source: llm

Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc().

Core 4

Core References

Patch

Mailing List, Third Party Advisory

Mailing List, Third Party Advisory

Exploit, Issue Tracking, Mailing List, Patch, Third Party Advisory

CVSS v3 9.0

EPSS 0.0117

EPSS Percentile 63.6%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

CWE

CWE-20 CWE-787

Status published

Products (4)

aomedia/aomedia < 3.7.1

fedoraproject/fedora 38

fedoraproject/fedora 39

libaom/libaom < 3.7.1

Published Dec 27, 2023

Tracked Since Feb 18, 2026