Xvid is a widely embedded video codec library used across media players, encoding tools, and multimedia applications, presenting a supply-chain exposure pattern similar to other foundational encoding components. The observed vulnerability signal centers on the codec's memory-handling operations, with recurring weaknesses in buffer-boundary enforcement characteristic of parsers processing untrusted media streams; current severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Xvid over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2009-0893HIGH Multiple heap-based buffer overflows in xvidcore/src/decoder.c in the xvidcore library in Xvid before 1.2.2, as used by Windows Media Player and other applications, allow remote at | Jun 2, 2009 | 10.0 | 32 | NO | NO |
CVE-2009-0894HIGH Heap-based buffer overflow in the decoder_create function in the initialization functionality in xvidcore/src/decoder.c in Xvid before 1.2.2, as used by Windows Media Player and ot | Jun 2, 2009 | 10.0 | 30 | NO | NO |
CVE-2007-3329MEDIUM Multiple array index errors in the (1) get_intra_block, (2) get_inter_block_h263, and (3) get_inter_block_mpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote atta | Jun 21, 2007 | 6.8 | 19 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Xvid.
Media articles that mention a CVE ID that affects a product developed by Xvid — matched by CVE ID, not by vendor name.