CVE-2020-36133: 
Linux Debian vulnerability analysis and mitigation

AOM v2.0.1 was discovered to contain a global buffer overflow vulnerability in the component av1/encoder/partition_search.h. The vulnerability was assigned CVE-2020-36133 and was initially recorded on January 4, 2021. This security issue affects the AV1 Video Codec Library, which is widely used in various Linux distributions including Debian, Ubuntu, and Gentoo (NVD, Debian Security).

The vulnerability is characterized as a global buffer overflow issue specifically located in the av1/encoder/partition_search.h component of the AOM codec. This type of vulnerability typically occurs when a program writes or reads data beyond the bounds of an allocated buffer, which can lead to memory corruption (NVD).

When exploited, this vulnerability could potentially cause a denial of service or have other unspecified impacts if a malformed multimedia file is processed by the affected system (Debian LTS).

The vulnerability has been fixed in multiple distributions with updated versions. Debian fixed the issue in version 1.0.0-3+deb10u1 for Debian 10 and version 1.0.0.errata1-3+deb11u1 for Debian 11. Gentoo users should upgrade to version 3.2.0 or later. Ubuntu has also released security updates to address this vulnerability (Debian LTS, Gentoo Security).