CVE-2021-30473

aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap

published May 6, 2021

CVSS
—
EPSS
2%
Percentile
81.1
In the wild
Unconfirmed
What it is

⚠️ A mismanaged memory release could lead to unexpected behavior! This is like a construction crew wrongly disposing of leftover materials, causing chaos on the site. 🔥 Imagine a construction site where leftover bricks are discarded willy-nilly instead of being properly stored. Instead of maintaining order, this can lead to accidents or delays — that's what happens when memory is incorrectly freed in this context. While the severity is classified as unknown, the possibility of unexpected behavior could potentially compromise the stability of applications relying on this library. Users might encounter crashes or erratic outcomes, which can be frustrating and lead to downtime.

Put simply

Imagine a construction site where leftover bricks are discarded willy-nilly instead of being properly stored. Instead of maintaining order, this can lead to accidents or delays — that's what happens when memory is incorrectly freed in this context. CVE-2021-30473 in libaom affects the memory management within the aom_image.c file by freeing memory that isn’t allocated on the heap, creating a risk for application stability.

What to do

While the severity is classified as unknown, the possibility of unexpected behavior could potentially compromise the stability of applications relying on this library. Users might encounter crashes or erratic outcomes, which can be frustrating and lead to downtime. To mitigate this potential issue, update libaom to the latest version available after April 7, 2021. Regularly auditing your dependencies will ensure that you’re using the most secure and stable versions. You can tackle this! By staying updated and vigilant, you'll keep everything running smoothly. 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02050 · 81.1th percentile
Published
2021-05-06T00:00Z
EPSS history
Timeline
  • 06 MAY 00:00Z
    aom_image.c in libaom in AOMedia before 2021-04-07 frees memory that is not located on the heap
    cvelistv5