VendorsAomedialibavifall versions
Vulnerabilities

Aomedia Alliance for Open Media (aomedia) libavif

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2025-48174
In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size.
Published 2025-05-16 · Modified
9.1EPSS 0.004
CVE-2020-36407
libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid.
Published 2021-07-01 · Modified
8.8EPSS 0.014
CVE-2025-48175
In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes.
Published 2025-05-16 · Modified
6.5EPSS 0.003