CVE-2023-44488

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weakness enumeration

CWE-755

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Sep 30, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-44498.8A vulnerability was found in SourceCodester Free and Open Source Inventory Management System 1.0. It has been classified as critical. AffectCVE-2023-44509.8A vulnerability was found in jeecgboot JimuReport up to 1.6.0. It has been declared as critical. Affected by this vulnerability is an unknowCVE-2023-44516.1Cross-site Scripting (XSS) - Reflected in GitHub repository cockpit-hq/cockpit prior to 2.6.4.CVE-2023-44527.5A vulnerability has been identified in the EDR-810, EDR-G902, and EDR-G903 Series, making them vulnerable to the denial-of-service vulnerabCVE-2023-44535.4Cross-site Scripting (XSS) - Reflected in GitHub repository pimcore/pimcore prior to 10.6.8.CVE-2023-44545.7Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.CVE-2023-44556.5Cross-Site Request Forgery (CSRF) in GitHub repository wallabag/wallabag prior to 2.6.3.CVE-2023-44566.5A flaw was found in openshift-logging LokiStack. The key used for caching is just the token, which is too broad. This issue allows a user wiCVE-2023-44577.5Grafana is an open-source platform for monitoring and observability. The Google Sheets data source plugin for Grafana, versions 0.9.0 to 1.CVE-2023-44587.5A flaw was found within the parsing of extended attributes in the kernel ksmbd module. The issue results from the lack of proper validation CVE-2023-44595.5A NULL pointer dereference flaw was found in vmxnet3_rq_cleanup in drivers/net/vmxnet3/vmxnet3_drv.c in the networking sub-component in vmxnCVE-2023-44605.4The Uploading SVG, WEBP and ICO files WordPress plugin through 1.2.1 does not sanitise uploaded SVG files, which could allow users with a ro
CVE-2023-44488: High severity, CVSS 7.5 | Vulnix