CVE-2021-30473

Name
CVE-2021-30473
Description
aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap.
NVD Severity
unknown
Other trackers
CVE, NVD, CERT, CVE Details, CIRCL, Arch Linux, Debian, Red Hat, Ubuntu, Gentoo, SUSE (Bugzilla), SUSE (CVE), Mageia
Mailing lists
oss-security, full-disclosure, bugtraq
Exploits
Exploit DB, Metasploit
Forges
GitHub (code, issues), Aports (code, issues)

References

Type URI
MISC https://aomedia.googlesource.com/aom/+/4efe20e99dcd9b6f8eadc8de8acc825be7416578
MISC https://bugs.chromium.org/p/aomedia/issues/detail?id=2998
FEDORA https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZXCI33HXH6YSOGC2LPE2REQLMIDH6US4/
cve@mitre.org https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html
cve@mitre.org https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/ZXCI33HXH6YSOGC2LPE2REQLMIDH6US4/
cve@mitre.org https://security.gentoo.org/glsa/202401-32
cve@mitre.org https://www.debian.org/security/2023/dsa-5490

Match rules

CPE URI Source package Min version Max version
cpe:2.3:a:aomedia:aomedia:*:*:*:*:*:*:*:* aomedia >= None < 2021-04-07:
cpe:2.3:a:aomedia:aomedia:*:*:*:*:*:*:*:* aomedia >= None < 2021-04-07

Vulnerable and fixed packages

Source package Branch Version Maintainer Status
aom edge-main 3.1.1-r0 None fixed
aom edge-community 3.1.1-r0 Oleg Titov <oleg.titov@gmail.com> fixed
aom 3.22-main 3.1.1-r0 None fixed
aom 3.21-main 3.1.1-r0 None fixed
aom 3.20-main 3.1.1-r0 None fixed
aom 3.19-main 3.1.1-r0 None fixed
aom 3.18-main 3.1.1-r0 None fixed
aom 3.17-main 3.1.1-r0 None fixed