Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
6.5
CVE-2020-36135: Debian AOM 2.0.1 can cause program crash
CVE-2020-36135 · published 4 years ago
Summary
The AOM 2.0.1 package from Debian contains a coding mistake in a part called rate_hist that can cause the program to stop working unexpectedly. If your systems use AOM for video handling, they could crash. Install the latest AOM version or the vendor’s fix to avoid the problem.
What to do
- Update debian aom to version 3.2.0-1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Debian:12 | debian | aom |
< 3.2.0-1 Fix: upgrade to 3.2.0-1
|
| Debian:13 | debian | aom |
< 3.2.0-1 Fix: upgrade to 3.2.0-1
|
| Debian:14 | debian | aom |
< 3.2.0-1 Fix: upgrade to 3.2.0-1
|
| – | aomedia | aomedia |
2.0.1 cpe:2.3:a:aomedia:aomedia:2.0.1:*:*:*:*:*:*:* |
Original advisory text
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
AOM v2.0.1 was discovered to contain a NULL pointer dereference via the component rate_hist.c.
References
- https://security-tracker.debian.org/tracker/CVE-2020-36135 Vendor Advisory
- https://bugs.chromium.org/p/aomedia/issues/detail?id=2910&q=&can=1 Exploit Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00003.html
- https://security.gentoo.org/glsa/202401-32
- https://www.debian.org/security/2023/dsa-5490
Severity
6.5
Medium
Type
CWE-476NULL Pointer Dereference
Timeline
Published2 Dec 2021
Updated31 Oct 2026
First seen11 Sep 2026
Track software like this
Free during beta