CVE-2024-5171

CVE-2024-5171 is a critical integer overflow vulnerability in the libaom library's img_alloc_helper function, affecting aomedia libaom. This flaw can lead to a heap buffer overflow when large values are passed to aom_img_alloc, aom_img_wrap, or aom_img_alloc_with_border, resulting in incorrect buffer size calculations and potentially invalid aom_image_t struct fields. With a CVSS score of 9.8 (Critical), it presents a severe risk as it can be exploited remotely without user interaction, leading to high impact on confidentiality, integrity, and availability. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.