What is RHSA-2020:4629?

RHSA-2020:4629 is a security advisory published by Red Hat Product Security with Medium severity. Red Hat Security Advisory: libvpx security update

Which CVE IDs does RHSA-2020:4629 cover?

RHSA-2020:4629 covers the following CVE IDs: CVE-2019-2126, CVE-2019-9232, CVE-2019-9371, CVE-2019-9433. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of RHSA-2020:4629?

RHSA-2020:4629 has a CVSS v3 base score of 8.8, published by Red Hat Product Security.

RHSA-2020:4629MediumCVSS 8.8

Red Hat Security Advisory: libvpx security update

Vendor

Red Hat Product Security

Published

November 4, 2020

Last Modified

June 26, 2026

🔗 CVE IDs covered (4)

CVE-2019-2126 →CVE-2019-9232 →CVE-2019-9371 →CVE-2019-9433 →

📋 Description

CVE-2019-2126 — libvpx: Double free in ParseContentEncodingEntry() in mkvparser.cc CVE-2019-9232 — libvpx: Out of bounds read in vp8_norm table CVE-2019-9371 — libvpx: Resource exhaustion after memory leak in mkvparser.cc CVE-2019-9433 — libvpx: Use-after-free in vp8_deblock() in vp8/common/postproc.c

🔗 References (8)

selfhttps://access.redhat.com/errata/RHSA-2020:4629
externalhttps://access.redhat.com/security/updates/classification/#moderate
externalhttps://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.3_release_notes/
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1788966
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1788994
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1789004
externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1789008
selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2020/rhsa-2020_4629.json