CVE-2024-5197

There exists interger overflows in libvpx in versions prior to 1.14.1.Calling vpx_img_alloc()with a large value of the d_w, d_h, or alignparameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_tstruct may be invalid.Calling vpx_img_wrap()with a large value of the d_w, d_h, or stride_alignparameter may result in integer overflows in the calculations of buffer sizes and offsets and some fields of the returned vpx_image_tstruct may be invalid. We recommend upgrading to version 1.14.1 or beyond