CVE-2018-25010

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

Score

CVSS 3.1 9.1 Critical

Status

Modified - secalert@redhat.com

Published

2021-05-21

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Enterprise Linux (Redhat)
• Libwebp (Webmproject)

References

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9105
• https://bugzilla.redhat.com/show_bug.cgi?id=1956918
• https://chromium.googlesource.com/webm/libwebp/+/1344a2e947c749d231141a295327e5b99b444d63