CVE-2024-5171

The vulnerability is triggered by calling one of three public library functions: aom_img_alloc(), aom_img_wrap(), or aom_img_alloc_with_border() with excessively large parameter values such as d_w, d_h, align, size_align, or border. Passing such values causes an integer overflow during buffer size calculations and offset computations, and some fields of the returned aom_image_t structure receive incorrect values. As a result, a write occurs beyond the boundaries of the allocated heap buffer (heap buffer overflow).

An attacker can achieve arbitrary code execution (RCE) or destabilize an application using the libaom library, potentially taking control of the victim's system. Due to the lack of authentication and user interaction requirements, the vulnerability is particularly dangerous in applications processing external video files or AV1 streaming data.

Patches available from the vendor should be applied according to the references. Users of Fedora and Debian distributions should immediately update the libaom package to the version provided by distribution maintainers (details in fedora-package-announce and debian-lts-announce lists).

Aomedia libaom library — versions indicated in vendor references and distribution packages for Fedora and Debian (according to published security announcements).