CVE-2018-25012

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

Score

CVSS 3.1 9.1 Critical

Status

Modified - secalert@redhat.com

Published

2021-05-21

Last modified

2024-08-05

Weaknesses

CWE-125

Affected products

• Enterprise Linux (Redhat)
• Libwebp (Webmproject)

References

• https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9123
• https://bugzilla.redhat.com/show_bug.cgi?id=1956922
• https://chromium.googlesource.com/webm/libwebp/+/95fd65070662e01cc9170c4444f5c0859a710097