汇总 aomedia 相关全部产品的 CVE 与安全漏洞情报，包括 CVSS、EPSS、公开时间与漏洞情报数据。
常见弱点模式包括 缓冲区溢出、内存损坏与输入验证问题，在 生产负载与软件部署 使用场景中可能带来 内存损坏、应用崩溃与异常行为 等风险。
相关漏洞数据主要来源于公开漏洞披露与安全公告，可用于评估历史漏洞暴露面与修复优先级。
| CVE | 摘要 | 来源 | 最高 CVSS | EPSS % | 公开时间 | 更新时间 |
|---|---|---|---|---|---|---|
| CVE-2025-48175 | In libavif before 1.3.0, avifImageRGBToYUV in reformat.c has integer overflows in multiplications involving rgbRowBytes, yRowBytes, uRowBytes, and vRowBytes. | [email protected] | 4.5 | 0.27% | 2025-05-16 | 2026-06-17 |
| CVE-2025-48174 | In libavif before 1.3.0, makeRoom in stream.c has an integer overflow and resultant buffer overflow in stream->offset+size. | [email protected] | 4.5 | 0.32% | 2025-05-16 | 2026-06-17 |
| CVE-2024-5171 | Integer overflow in libaom internal function img_alloc_helper can lead to heap buffer overflow. This function can be reached via 3 callers: * Calling aom_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned aom_image_t struct may be invalid. * Calling aom_img_wrap() with a large value of the d_w, d_h, or align parameter may result in integer overflows in the calcu | [email protected] | 10.0 | 1.25% | 2024-06-05 | 2026-06-17 |
| CVE-2023-6879 | Increasing the resolution of video frames, while performing a multi-threaded encode, can result in a heap overflow in av1_loop_restoration_dealloc(). | [email protected] | 9.0 | 1.17% | 2023-12-27 | 2026-06-23 |
| CVE-2023-39616 | AOMedia v3.0.0 to v3.5.0 was discovered to contain an invalid read memory access via the component assign_frame_buffer_p in av1/common/av1_common_int.h. | [email protected] | 7.5 | 0.62% | 2023-08-29 | 2026-06-17 |
| CVE-2020-36135 | AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c. | [email protected] | 6.5 | 1.38% | 2021-12-02 | 2026-06-16 |
| CVE-2020-36134 | AOM v2.0.1 was discovered to contain a segmentation violation via the component aom_dsp/x86/obmc_sad_avx2.c. | [email protected] | 6.5 | 1.11% | 2021-12-02 | 2026-06-16 |
| CVE-2020-36133 | AOM v2.0.1 was discovered to contain a global buffer overflow via the component av1/encoder/partition_search.h. | [email protected] | 8.8 | 1.65% | 2021-12-02 | 2026-06-16 |
| CVE-2020-36131 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component stats/rate_hist.c. | [email protected] | 8.8 | 1.65% | 2021-12-02 | 2026-06-16 |
| CVE-2020-36130 | AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component av1/av1_dx_iface.c. | [email protected] | 6.5 | 1.38% | 2021-12-02 | 2026-06-16 |
| CVE-2020-36129 | AOM v2.0.1 was discovered to contain a stack buffer overflow via the component src/aom_image.c. | [email protected] | 8.8 | 1.37% | 2021-12-02 | 2026-06-16 |
| CVE-2020-36407 | libavif 0.8.0 and 0.8.1 has an out-of-bounds write in avifDecoderDataFillImageGrid. | [email protected] | 8.8 | 1.40% | 2021-06-30 | 2026-06-16 |
| CVE-2021-30475 | aom_dsp/noise_model.c in libaom in AOMedia before 2021-03-24 has a buffer overflow. | [email protected] | 9.8 | 2.22% | 2021-06-04 | 2026-06-16 |
| CVE-2021-30474 | aom_dsp/grain_table.c in libaom in AOMedia before 2021-03-30 has a use-after-free. | [email protected] | 9.8 | 1.88% | 2021-06-02 | 2026-06-16 |
| CVE-2021-30473 | aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap. | [email protected] | 9.8 | 2.05% | 2021-05-06 | 2026-06-16 |