CVE-2023-44488

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

• CWE-755

• http://www.openwall.com/lists/oss-security/2023/09/30/4Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2241806Issue Tracking, Patch, Third Party Advisory
• https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223fPatch
• https://github.com/webmproject/libvpx/commit/df9fd9d5b7325060b2b921558a1eb20ca7880937Patch
• https://github.com/webmproject/libvpx/compare/v1.13.0...v1.13.1Patch
• https://github.com/webmproject/libvpx/releases/tag/v1.13.1Release Notes
• https://lists.debian.org/debian-lts-announce/2023/10/msg00001.htmlMailing List
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202310-04Third Party Advisory
• https://www.debian.org/security/2023/dsa-5518Third Party Advisory
• http://www.openwall.com/lists/oss-security/2023/09/30/4Mailing List, Third Party Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2241806Issue Tracking, Patch, Third Party Advisory
• https://github.com/webmproject/libvpx/commit/263682c9a29395055f3b3afe2d97be1828a6223fPatch
• https://github.com/webmproject/libvpx/commit/df9fd9d5b7325060b2b921558a1eb20ca7880937Patch
• https://github.com/webmproject/libvpx/compare/v1.13.0...v1.13.1Patch
• https://github.com/webmproject/libvpx/releases/tag/v1.13.1Release Notes
• https://lists.debian.org/debian-lts-announce/2023/10/msg00001.htmlMailing List
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/Mailing List, Third Party Advisory
• https://security.gentoo.org/glsa/202310-04Third Party Advisory
• https://www.debian.org/security/2023/dsa-5518Third Party Advisory

Published

Sep 30, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-44482Leave Management System Project v1.0 is vulnerable to multip…8.8
• CVE-2023-44483All versions of Apache Santuario - XML Security for Java pri…6.5
• CVE-2023-44484Online Blood Donation Management System v1.0 is vulnerable t…6.1
• CVE-2023-44485Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-44486Rejected reason: This CVE ID has been rejected or withdrawn …
• CVE-2023-44487The HTTP/2 protocol allows a denial of service (server resou…7.5
• CVE-2023-4449A vulnerability was found in SourceCodester Free and Open So…8.8
• CVE-2023-4450A vulnerability was found in jeecgboot JimuReport up to 1.6.…9.8
• CVE-2023-4451Cross-site Scripting (XSS) - Reflected in GitHub repository …6.1
• CVE-2023-4452A vulnerability has been identified in the EDR-810, EDR-G902…7.5
• CVE-2023-4453Cross-site Scripting (XSS) - Reflected in GitHub repository …5.4
• CVE-2023-4454Cross-Site Request Forgery (CSRF) in GitHub repository walla…5.7