UbuntuUpdates.org

Package "libaom-doc"

Name: libaom-doc

Description:

AV1 Video Codec Library -- Documentation
Latest version: 3.8.2-2ubuntu0.2
Release: noble (24.04)
Level: updates
Repository: main
Head package: aom
Homepage: https://aomedia.googlesource.com/aom/

Links

All versions of this package
Bug fixes

List of files in package
Repository home page

Download "libaom-doc"

All arch deb package
APT INSTALL

Other versions of "libaom-doc" in Noble

Repository Area Version
base main 3.8.2-2build1
security main 3.8.2-2ubuntu0.2

Changelog

Version: 3.8.2-2ubuntu0.2 2026-09-16 12:07:30 UTC

aom (3.8.2-2ubuntu0.2) noble-security; urgency=medium

  * SECURITY UPDATE: Heap buffer overflow in LAP mode
    - debian/patches/CVE-2026-56208.patch: handle buffer pointer in LAP
      mode to avoid buffer overflow in av1/encoder/encoder.h,
      av1/encoder/firstpass.c, av1/encoder/pass2_strategy.c,
      test/encode_api_test.cc.
    - CVE-2026-56208
  * SECURITY UPDATE: Missing bounds check on SVC layer ID controls
    - debian/patches/CVE-2026-56209_56210_56211.patch: check for invalid
      parameters for SVC layer ID setting in aom/aomcx.h,
      av1/av1_cx_iface.c, test/encode_api_test.cc.
    - CVE-2026-56209
    - CVE-2026-56210
    - CVE-2026-56211

 -- Allen Huang Mon, 14 Sep 2026 17:15:00 +0100
Source diff to previous version
CVE-2026-56208 A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (
CVE-2026-56209 An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Vid
CVE-2026-56210 A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Vi
CVE-2026-56211 A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder'

Version: 3.8.2-2ubuntu0.1 2024-06-06 21:07:04 UTC

  aom (3.8.2-2ubuntu0.1) noble-security; urgency=medium

  * SECURITY UPDATE: Integer overflow in img_alloc_helper
    - debian/patches/CVE-2024-5171-1.patch: fix integer overflows in calc
      of stride_in_bytes in aom/src/aom_image.c, test/aom_image_test.cc.
    - debian/patches/CVE-2024-5171-2.patch: avoid integer overflows in
      align_image_dimension() in aom/aom_image.h, aom/src/aom_image.c,
      test/aom_image_test.cc.
    - CVE-2024-5171

 -- Marc Deslauriers <email address hidden> Wed, 05 Jun 2024 09:21:53 -0400
CVE-2024-5171 Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Ca


About   -   Send Feedback to @ubuntu_updates