CVE-2024-5171 heap buffer overflow in libaom
An integer overflow in libaom's image allocation can lead to heap buffer overflows, potentially allowing code execution or denial of service.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2024-5171?
CVE-2024-5171 is a critical vulnerability in libaom, published on 5 Jun 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers:
* Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_alloc_with_border() with a large value of the d_w, d_h, align, size_align, or border parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid.
Which versions are affected by CVE-2024-5171?
It affects 1 product.
Linux distribution packages (18)
libaom SUSE:Enterprise Storage 7.1 | All versions | 1.0.0-150200.3.18.1 |
libaom SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS | All versions | 1.0.0-150200.3.18.1 |
libaom SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS | All versions | 1.0.0-150200.3.18.1 |
libaom SUSE:Linux Enterprise High Performance Computing 15 SP4-ESPOS | All versions | 3.2.0-150400.3.6.1 |
libaom SUSE:Linux Enterprise High Performance Computing 15 SP4-LTSS | All versions | 3.2.0-150400.3.6.1 |
libaom SUSE:Linux Enterprise Module for Basesystem 15 SP5 | All versions | 3.2.0-150400.3.6.1 |
libaom SUSE:Linux Enterprise Module for Desktop Applications 15 SP6 | All versions | 3.7.1-150600.3.3.1 |
libaom SUSE:Linux Enterprise Server 15 SP2-LTSS | All versions | 1.0.0-150200.3.18.1 |
libaom SUSE:Linux Enterprise Server 15 SP3-LTSS | All versions | 1.0.0-150200.3.18.1 |
libaom SUSE:Linux Enterprise Server 15 SP4-LTSS | All versions | 3.2.0-150400.3.6.1 |
libaom SUSE:Linux Enterprise Server for SAP Applications 15 SP2 | All versions | 1.0.0-150200.3.18.1 |
libaom SUSE:Linux Enterprise Server for SAP Applications 15 SP3 | All versions | 1.0.0-150200.3.18.1 |
libaom SUSE:Linux Enterprise Server for SAP Applications 15 SP4 | All versions | 3.2.0-150400.3.6.1 |
libaom SUSE:Manager Proxy 4.3 | All versions | 3.2.0-150400.3.6.1 |
libaom SUSE:Manager Server 4.3 | All versions | 3.2.0-150400.3.6.1 |
libaom openSUSE:Leap 15.5 | All versions | 3.2.0-150400.3.6.1 |
libaom openSUSE:Leap 15.6 | All versions | 3.7.1-150600.3.3.1 |
libaom-devel-doc openSUSE:Leap 15.6 | All versions | 3.7.1-150600.3.3.1 |
Products include Aomedia Libaom.
How do I fix CVE-2024-5171?
Apply the vendor's patch.
Is CVE-2024-5171 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-5171 exists.
Sources
Also known as ALPINE-CVE-2024-5171, AZL-62420, BELL-CVE-2024-5171, DEBIAN-CVE-2024-5171, DLA-3881-1, DSA-5753-1 and 12 more.