Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

webmproject libwebp vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2023-4863
Heap buffer overflow in libwebp in Google Chrome before 116.0.5845.187 and libwebp 1.3.2 allowed a remote malicious user to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
Google ChromeFedoraproject Fedora 37Fedoraproject Fedora 38Fedoraproject Fedora 39Debian Debian Linux 10.0Debian Debian Linux 11.0Debian Debian Linux 12.0Mozilla FirefoxMozilla ThunderbirdMozilla Firefox EsrMicrosoft EdgeWebmproject Libwebp
NA
CVE-2023-1999
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is sti...
Webmproject Libwebp
6.4
CVSSv2
CVE-2020-36330
A flaw was found in libwebp in versions prior to 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Webmproject LibwebpDebian Debian Linux 9.0Debian Debian Linux 10.0Redhat Enterprise Linux 8.0Netapp Ontap Select Deploy Administration Utility -Apple IpadosApple Iphone Os
6.4
CVSSv2
CVE-2020-36331
A flaw was found in libwebp in versions prior to 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Webmproject LibwebpRedhat Enterprise Linux 8.0Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0Debian Debian Linux 10.0Apple Iphone OsApple Ipados
6.4
CVSSv2
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions prior to 1.0.1 in GetLE24().
Webmproject LibwebpRedhat Enterprise Linux 8.0
6.4
CVSSv2
CVE-2018-25009
A heap-based buffer overflow was found in libwebp in versions prior to 1.0.1 in GetLE16().
Webmproject LibwebpRedhat Enterprise Linux 8.0
6.4
CVSSv2
CVE-2018-25010
A heap-based buffer overflow was found in libwebp in versions prior to 1.0.1 in ApplyFilter().
Webmproject LibwebpRedhat Enterprise Linux 8.0
6.4
CVSSv2
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions prior to 1.0.1 in ShiftBytes().
Webmproject LibwebpRedhat Enterprise Linux 8.0
5
CVSSv2
CVE-2020-36332
A flaw was found in libwebp in versions prior to 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
Webmproject LibwebpRedhat Enterprise Linux 8.0Debian Debian Linux 10.0Netapp Ontap Select Deploy Administration Utility -
7.5
CVSSv2
CVE-2020-36328
A flaw was found in libwebp in versions prior to 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availabili...
Webmproject LibwebpRedhat Enterprise Linux 7.0Redhat Enterprise Linux 8.0Netapp Ontap Select Deploy Administration Utility -Debian Debian Linux 9.0Debian Debian Linux 10.0Apple Ipados 14.7Apple Iphone Os 14.7
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-27322CVE-2006-4304wirelessCVE-2023-23022local file inclusionCVE-2024-27058CVE-2024-33820open redirectCVE-2024-27079
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook