Libwebp (Webmproject) - vulnerabilities (CVEs)
15 CVEs, 0 in the last 30 days, 45 known versions, newest CVE from 2023-09-12. Vendor: Webmproject.
CVEs of Libwebp
- CVE-2023-4863 - CVSS 8.8 (high), 2023-09-12: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write…
- CVE-2023-1999 - CVSS 7.5 (high), 2023-06-20: There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign…
- CVE-2018-25010 - CVSS 9.1 (critical), 2021-05-21: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
- CVE-2018-25013 - CVSS 9.1 (critical), 2021-05-21: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
- CVE-2020-36329 - CVSS 9.8 (critical), 2021-05-21: A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this…
- CVE-2020-36332 - CVSS 7.5 (high), 2021-05-21: A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this…
- CVE-2018-25009 - CVSS 9.1 (critical), 2021-05-21: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
- CVE-2018-25012 - CVSS 9.1 (critical), 2021-05-21: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
- CVE-2020-36328 - CVSS 9.8 (critical), 2021-05-21: A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for…
- CVE-2020-36331 - CVSS 9.1 (critical), 2021-05-21: A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability…
- CVE-2018-25011 - CVSS 9.8 (critical), 2021-05-21: A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
- CVE-2018-25014 - CVSS 9.8 (critical), 2021-05-21: A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
- CVE-2020-36330 - CVSS 9.1 (critical), 2021-05-21: A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this…
- CVE-2016-9969 - CVSS 7.5 (high), 2019-05-23: In libwebp 0.5.1, there is a double free bug in libwebpmux.
- CVE-2016-9085 - CVSS 3.3 (low), 2017-02-03: Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
