A vulnerability was found in Chromium libvpx up to 1.14.0. It has been rated as critical. Affected by this issue is the function
vpx_img_alloc
. The manipulation of the argument d_w/d_h/align leads to integer overflow.
This vulnerability is handled as CVE-2024-5197. The attack may be launched remotely. There is no exploit available.
It is recommended to upgrade the affected component.