N\u00eb bibliotek\u00ebn libaom, e zhvilluar nga aleanca Open Media (AOMedia), e cila ofron nj\u00eb implementim referenc\u00eb t\u00eb formatit t\u00eb kodimit t\u00eb videove AV1, \u00ebsht\u00eb zbuluar nj\u00eb vulnerabilitet kritik (CVE-2024-5171), q\u00eb \u00e7on n\u00eb mbip\u00ebrmbushje t\u00eb numrave t\u00eb plot\u00eb dhe shkrim jasht\u00eb kufijve t\u00eb memories gjat\u00eb p\u00ebrpunimit t\u00eb vlerave shum\u00eb t\u00eb m\u00ebdha n\u00eb disa parametra. Nj\u00eb vulnerabilitet i ngjash\u00ebm (CVE-2024-5197) \u00ebsht\u00eb zbuluar n\u00eb bibliotek\u00ebn libvpx me implementimet e kodeve VP8 dhe VP9. Problemet jan\u00eb zgjidhur n\u00eb p\u00ebrdit\u00ebsimet libaom 3.9.0 dhe libvpx 1.14.1. N\u00eb distribucionet, vulnerabilitetet ende mbeten t\u00eb pap\u00ebrmir\u00ebsuara (Debian, Ubuntu, RHEL, SUSE\/openSUSE, Fedora, Arch, FreeBSD). <\/p>\n
Vulnerabilitetet n\u00eb libaom i jan\u00eb caktuar nivel maksimal rrezikshm\u00ebrie (10 nga 10), q\u00eb n\u00ebnkupton mund\u00ebsin\u00eb e shfryt\u00ebzimit gjat\u00eb p\u00ebrpunimit n\u00eb aplikacione q\u00eb p\u00ebrdorin k\u00ebt\u00eb bibliotek\u00eb, me p\u00ebrmbajtje t\u00eb ve\u00e7anta t\u00eb dizajnuara. N\u00eb libvpx niveli i rrezikshm\u00ebris\u00eb \u00ebsht\u00eb caktuar n\u00eb 5.9 nga 10, q\u00eb p\u00ebrputhet me kushte t\u00eb kufizuara shfryt\u00ebzimi. Rreziku kryesor nga vulnerabilitetet n\u00eb libaom dhe libvpx \u00ebsht\u00eb p\u00ebr shkak se k\u00ebto biblioteka p\u00ebrdoren n\u00eb shfletuesit e internetit, lojtar\u00ebt e mediave dhe sh\u00ebrbimet q\u00eb kryejn\u00eb rikodimin e videove. <\/p>\n
Vulnerabiliteti shfaqet n\u00eb libaom gjat\u00eb thirrjes s\u00eb funksioneve aom_img_alloc(), aom_img_wrap() ose om_img_alloc_with_border() me vlera t\u00eb m\u00ebdha n\u00eb parametrat d_w, d_h dhe align, q\u00eb \u00e7ojn\u00eb n\u00eb mbip\u00ebrmbushje t\u00eb numrave t\u00eb plot\u00eb gjat\u00eb llogaritjes s\u00eb zhvendosjeve dhe madh\u00ebsive t\u00eb memories. Nj\u00eb mbip\u00ebrmbushje e ngjashme ndodh n\u00eb funksionet vpx_img_alloc() dhe vpx_img_wrap(). K\u00ebto funksione p\u00ebrdoren gjat\u00eb kodimit t\u00eb videove. <\/p>\n
Vulnerabiliteti paraqet rrezik m\u00eb t\u00eb madh p\u00ebr shkak t\u00eb mund\u00ebsis\u00eb s\u00eb nj\u00eb sulmi ndaj shfletuesve, n\u00eb t\u00eb cil\u00ebt vulnerabilitete t\u00eb ngjashme t\u00eb kaluara mund t\u00eb ken\u00eb qen\u00eb shfryt\u00ebzuar p\u00ebrmes hapjes n\u00eb shfletues nj\u00eb faqeje t\u00eb dizajnuar q\u00eb th\u00ebrret funksionet JavaScript p\u00ebr kodimin e videove, ose p\u00ebrmes manipulimeve me WebRTC. Sipas p\u00ebrfaq\u00ebsuesve t\u00eb Google, vulnerabiliteti nuk ndikon n\u00eb motorin Chromium, pasi n\u00eb funksionet aom_img_alloc(), aom_img_wrap(), vpx_img_alloc() dhe vpx_img_wrap() jan\u00eb kaluar vet\u00ebm vlera t\u00eb verifikuara t\u00eb argumenteve d_w dhe d_h. N\u00eb Firefox p\u00ebr dekodimin e AV1 p\u00ebrdoret biblioteka dav1d, por p\u00ebr kodimin p\u00ebrdoret libaom. N\u00ebse Firefox \u00ebsht\u00eb i ekspozuar ndaj problemit ende nuk \u00ebsht\u00eb e qart\u00eb, pasi informacioni se si vulnerabiliteti ndikon n\u00eb produkte t\u00eb ve\u00e7anta ende nuk \u00ebsht\u00eb publikur. \u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0430\u043b\u044c\u044f\u043d\u0441\u043e\u043c Open Media (AOMedia) \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libaom, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e AV1, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5171), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u043c\u0443 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u0438 \u0437\u0430\u043f\u0438\u0441\u0438 \u0432 \u043e\u0431\u043b\u0430\u0441\u0442\u044c \u0432\u043d\u0435 \u0433\u0440\u0430\u043d\u0438\u0446 \u0431\u0443\u0444\u0435\u0440\u0430 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 \u0441\u043b\u0438\u0448\u043a\u043e\u043c \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u0439 \u0432 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430\u0445. \u0410\u043d\u0430\u043b\u043e\u0433\u0438\u0447\u043d\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5197) \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u0432 \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libvpx \u0441 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u0435\u0439 \u043a\u043e\u0434\u0435\u043a\u043e\u0432 VP8 \u0438 VP9. \u041f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u044b \u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f\u0445 […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-116387","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Dob\u00ebsia n\u00eb realizimet referenc\u00eb t\u00eb kodek\u00ebve AV1 dhe VP8\/VP9 | ProHoster","description":"N\u00eb bibliotek\u00ebn libaom, e cila ofron nj\u00eb realizim referenc\u00eb t\u00eb formatit t\u00eb kodimit t\u00eb videos AV1 t\u00eb zhvilluar nga aleanca Open Media (AOMedia), \u00ebsht\u00eb identifikuar nj\u00eb dob\u00ebsi kritike (CVE-2024-5171), e cila \u00e7on n\u00eb nj\u00eb integer overflow.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-etalonnyh-realizacziyah-kodekov-av1-i-vp8-vp9","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u044b\u0445 \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044f\u0445 \u043a\u043e\u0434\u0435\u043a\u043e\u0432 AV1 \u0438 VP8\/VP9 | ProHoster","og:description":"\u0412 \u0440\u0430\u0437\u0432\u0438\u0432\u0430\u0435\u043c\u043e\u0439 \u0430\u043b\u044c\u044f\u043d\u0441\u043e\u043c Open Media (AOMedia) \u0431\u0438\u0431\u043b\u0438\u043e\u0442\u0435\u043a\u0435 libaom, \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0435\u0439 \u044d\u0442\u0430\u043b\u043e\u043d\u043d\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e \u0444\u043e\u0440\u043c\u0430\u0442\u0430 \u043a\u043e\u0434\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u0432\u0438\u0434\u0435\u043e AV1, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0430 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c (CVE-2024-5171), \u043f\u0440\u0438\u0432\u043e\u0434\u044f\u0449\u0430\u044f \u043a \u0446\u0435\u043b\u043e\u0447\u0438\u0441\u043b\u0435\u043d\u043d\u043e\u043c\u0443.","og:url":"https:\/\/prohoster.info\/sq\/blog\/news\/uyazvimost-v-etalonnyh-realizacziyah-kodekov-av1-i-vp8-vp9","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2024-06-06T13:39:51+00:00","article:modified_time":"2024-06-06T13:39:51+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"116387","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-01-23 01:52:19","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2026-01-23 01:52:19","updated":"2026-01-23 01:52:19","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116387","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=116387"}],"version-history":[{"count":0,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/116387\/revisions"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=116387"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=116387"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=116387"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}
\n
Burimi: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"