Chromium has fixed issues in its bundled copy of libvpx: https://www.openwall.com/lists/oss-security/2019/11/07/1 Links to the fixes are in the message above.
Whiteboard: (none) => MGA7TOO
The fixes are actually in Android, not Chromium.
Looking at upstream git tags I get the following: CVE-2019-9325 included in libvpx v1.8.1 so fixed in cauldron included in libvpx v1.8.0 so fixed in mga7 CVE-2019-9232 included in libvpx v1.8.1 so fixed in cauldron included in libvpx v1.8.0 so fixed in mga7 CVE-2019-9433 included in libvpx v1.8.1 so fixed in cauldron included in libvpx v1.8.0 so fixed in mga7
CC: (none) => cjw
Thanks!
Resolution: (none) => INVALIDStatus: NEW => RESOLVED
*** Bug 25775 has been marked as a duplicate of this bug. ***
CC: (none) => zombie.ryushu