VulertSecurity VulertSecurity

Security Update for libvdpau

libvdpau Updated 02 Oct 2025

Summary

10/09/2015
N/A
Yes i
Unrated
Not published

DSA-3355-1: libvdpau - security update. Affects libvdpau versions < 0.4.1-7+deb7u1. Fixed in 0.4.1-7+deb7u1. How to fix ↓

Free scan

Check if this vulnerability affects your application

Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.

Check my app free

No signup required · Results in about 60 seconds

Upload your dependency manifest or SBOM

Drag & drop your file here or

Java Javascript PHP Python Go Rust Ruby Dart C/C++ Elixir CycloneDX SPDX

Upload a supported dependency manifest or SBOM. No installation or source-code access required.

See supported files and SBOM formats
SBOM sbom.json · bom.json · bom.xml · *.spdx.json · *.cdx.json · *.cdx.xml
Java pom.xml · gradle.lockfile · buildscript-gradle.lockfile
Javascript package-lock.json · yarn.lock · pnpm-lock.yaml
PHP composer.lock
Python poetry.lock · requirements.txt · Pipfile.lock
Go go.mod
Rust Cargo.lock
Ruby Gemfile.lock
Dart pubspec.lock
C/C++ conan.lock
Elixir mix.lock
Enter your work email to receive your report link.

Verify your email to view the full report and start 30 days of continuous monitoring. No credit card required.

A free account is created for continuous monitoring. By scanning, you agree to our Terms & Conditions.

Sponsored Devnack Your last release was probably never penetration tested Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

Background

libvdpau is a VDPAU (Video Decode and Presentation API for Unix) wrapper library. It provides a compatibility layer for applications to utilize hardware-accelerated video decoding capabilities. This vulnerability affects libvdpau in Debian 7 (wheezy) and Debian 8 (jessie) distributions.

Vulnerability Detail

The discovered vulnerability in libvdpau arises from improper validation of environment variables. This flaw enables local attackers to exploit the library and potentially gain additional privileges. The impact of this vulnerability could lead to unauthorized access or privilege escalation on affected systems.

How To Fix

Minimum fixed version

0.4.1-7+deb7u1

This is the first release that contains the fix.

sudo apt-get install --only-upgrade libvdpau

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Workaround

No specific workaround has been provided for this vulnerability.

Conclusion

It is crucial to promptly upgrade the libvdpau packages to the fixed versions to mitigate the risk of unauthorized access and privilege escalation. For further assistance or support in vulnerability remediation, please contact DevNack.com.

See every vulnerability recorded for libvdpau →

Share this vulnerability

FAQ

What is libvdpau?

libvdpau is a VDPAU wrapper library that allows applications to utilize hardware-accelerated video decoding capabilities.

VDPAU stands for Video Decode and Presentation API for Unix. It provides an interface for video decoding and presentation on Unix-like systems.

This vulnerability in libvdpau could allow local attackers to gain additional privileges, potentially leading to unauthorized access or privilege escalation.

This vulnerability affects Debian 7 (wheezy) and Debian 8 (jessie) distributions of libvdpau.

To fix this vulnerability, upgrade the libvdpau packages to the recommended fixed versions for your Debian distribution.

Related vulnerabilities

Recent vulnerabilities recorded for libvdpau.

View all libvdpau vulnerabilities →
Sponsored Devnack Your last release was probably never penetration tested Manual testing by engineers who build software, not an auditor's checklist. Trusted by teams at Swift and Google Talk to Devnack

How To Fix

Minimum fixed version

0.4.1-7+deb7u1

This is the first release that contains the fix.

sudo apt-get install --only-upgrade libvdpau

Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →

Subscribe to Vulert on Telegram
Daily digest of new CVEs, critical and high severity, affected packages and fixes — plus a weekly roundup.
Join the channel →
Help improve this record
Report an issue or send feedback