Detections
Analytics
Alpine: multiple openh264 packages: security update to 2.6.0-r0
high Tenable Self-Hosted Container Security Plugin ID 426491
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- OpenH264 is a free license codec library which supports H.264 encoding and decoding. A vulnerability in
the decoding functions of OpenH264 codec library could allow a remote, unauthenticated attacker to trigger
a heap overflow. This vulnerability is due to a race condition between a Sequence Parameter Set (SPS)
memory allocation and a subsequent non Instantaneous Decoder Refresh (non-IDR) Network Abstraction Layer
(NAL) unit memory usage. An attacker could exploit this vulnerability by crafting a malicious bitstream
and tricking a victim user into processing an arbitrary video containing the malicious bistream. An
exploit could allow the attacker to cause an unexpected crash in the victim's user decoding client and,
possibly, perform arbitrary commands on the victim's host by abusing the heap overflow. This vulnerability
affects OpenH264 2.5.0 and earlier releases. Both Scalable Video Coding (SVC) mode and Advanced Video
Coding (AVC) mode are affected by this vulnerability. OpenH264 software releases 2.6.0 and later contained
the fix for this vulnerability. Users are advised to upgrade. There are no known workarounds for this
vulnerability. ### For more information If you have any questions or comments about this advisory: * [Open
an issue in cisco/openh264](https://github.com/cisco/openh264/issues) * Email Cisco Open Source Security
([[email protected]](mailto:[email protected])) and Cisco PSIRT
([[email protected]](mailto:[email protected])) ### Credits: * **Research:** Octavian Guzu and Andrew Calvano
of Meta * **Fix ideation:** Philipp Hancke and Shyam Sadhwani of Meta * **Fix implementation:** Benzheng
Zhang (@BenzhengZhang) * **Release engineering:** Benzheng Zhang (@BenzhengZhang) (CVE-2025-27091)
See Also
Plugin Details
Severity: High
ID: 426491
Version: Revision 1.10
Type: Local
Published: 5/16/2025
Updated: 7/2/2026
Supported Sensors: Agentless Assessment, Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Medium
Score: 4.9
Percentile: 57.75
CVSS v2
Risk Factor: High
Base Score: 7.6
Temporal Score: 5.6
Vector: CVSS2#AV:N/AC:H/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2025-27091
CVSS v3
Risk Factor: High
Base Score: 7.5
Temporal Score: 6.5
Vector: CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
CVSS v4
Risk Factor: High
Base Score: 8.6
Threat Score: 6.1
Threat Vector: CVSS:4.0/E:U
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Vulnerability Information
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 2/20/2025
Reference Information
CVE: CVE-2025-27091
IAVB: 2025-B-0030