View at Official suse advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2019-9371 severity moderate: SUSE including 29 source package names (libvpx, libvpx-1.7.0-8.el8, …), 85 product×package rows across 52 product lines (SUSE Liberty Linux 8, SUSE Linux Enterprise Desktop 12 SP4, … (52 product lines)): Fixed 51, Known Not Affected 34.
In libvpx, there is a possible resource exhaustion due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed. User interaction is needed for exploitation. Product: AndroidVersions: Android-10Android ID: A-132783254