Lucene search
PRIOn knowledge basePRION:CVE-2023-1999HistoryJun 20, 2023 - 12:15 p.m.
Double free
2023-06-2012:15:00
PRIOn knowledge base
www.prio-n.com
3
libwebp
use after free
double free
applyfiltersandencode
out of memory error
vp8 encoder
addresssanitizer
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
Related
redhat
redhat
(RHSA-2023:2076) Important: libwebp security update
2023-05-02 07:32:04
(RHSA-2023:2077) Important: libwebp security update
2023-05-02 07:34:29
(RHSA-2023:2075) Important: libwebp security update
2023-05-02 07:19:40
oraclelinux
oraclelinux
libwebp security update
2023-05-02 00:00:00
libwebp security update
2023-05-02 00:00:00
libwebp security update
2023-05-02 00:00:00
nessus
nessus
RHEL 7 : libwebp (RHSA-2023:2077)
2023-05-02 00:00:00
RHEL 8 : libwebp (RHSA-2023:2076)
2023-05-02 00:00:00
RHEL 8 : libwebp (RHSA-2023:2085)
2023-05-02 00:00:00
ubuntu
ubuntu
libwebp vulnerability
2023-05-16 00:00:00
libwebp vulnerability
2023-07-18 00:00:00
osv
osv
Important: libwebp security update
2023-05-25 20:21:42
CVE-2023-1999
2023-06-20 12:15:09
Important: libwebp security update
2023-05-02 00:00:00
mscve
mscve
Chromium: CVE-2023-1999 Use after free in libwebp
2023-09-29 16:24:23
rosalinux
rosalinux
Advisory ROSA-SA-2024-2358
2024-02-20 10:32:20
Advisory ROSA-SA-2023-2184
2023-07-11 11:09:54
cve
cve
CVE-2023-1999
2023-06-20 12:15:09
rocky
rocky
libwebp security update
2023-05-05 15:41:17
libwebp security update
2023-05-25 20:21:42
debiancve
debiancve
CVE-2023-1999
2023-06-20 12:15:09
ubuntucve
ubuntucve
CVE-2023-1999
2023-05-08 00:00:00
openvas
openvas
CentOS: Security Advisory for libwebp (CESA-2023:2077)
2023-07-30 00:00:00
Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2695)
2023-09-05 00:00:00
Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2359)
2023-07-17 00:00:00
alpinelinux
alpinelinux
CVE-2023-1999
2023-06-20 12:15:09
almalinux
almalinux
Important: libwebp security update
2023-05-02 00:00:00
Important: libwebp security update
2023-05-02 00:00:00
centos
centos
libwebp security update
2023-07-27 14:42:41
firefox security update
2023-04-24 17:46:00
thunderbird security update
2023-04-24 14:49:28
cloudfoundry
cloudfoundry
USN-6078-1: libwebp vulnerability | Cloud Foundry
2023-05-25 00:00:00
cbl_mariner
cbl_mariner
CVE-2023-1999 affecting package libwebp for versions less than 1.3.2-1
2023-10-04 16:53:46
cvelist
cvelist
CVE-2023-1999 Use after free in libwebp
2023-06-20 11:28:52
nvd
nvd
CVE-2023-1999
2023-06-20 12:15:09
veracode
veracode
Double-Free
2023-06-04 19:09:20
redhatcve
redhatcve
CVE-2023-1999
2023-04-28 09:51:35
debian
debian
[SECURITY] [DSA 5408-1] libwebp security update
2023-05-21 18:08:42
[SECURITY] [DLA 3439-1] libwebp security update
2023-05-31 14:32:15
cloudlinux
cloudlinux
libwebp: Fix of CVE-2023-1999
2023-10-12 18:41:30
photon
photon
Important Photon OS Security Update - PHSA-2023-5.0-0061
2023-07-29 00:00:00
Important Photon OS Security Update - PHSA-2023-4.0-0441
2023-07-30 00:00:00
Important Photon OS Security Update - PHSA-2023-3.0-0626
2023-08-03 00:00:00
gentoo
gentoo
WebP: Multiple vulnerabilities
2023-09-17 00:00:00
Mozilla Thunderbird: Multiple Vulnerabilities
2023-05-30 00:00:00
Mozilla Firefox: Multiple Vulnerabilities
2023-05-30 00:00:00
kaspersky
kaspersky
KLA61043 Multiple vulnerabilities in Microsoft Browser
2023-09-29 00:00:00
KLA48841 Multiple vulnerabilities in Mozilla Firefox ESR
2023-04-11 00:00:00
KLA48840 Multiple vulnerabilities in Mozilla Thunderbird
2023-04-11 00:00:00
amazon
amazon
Important: thunderbird
2023-04-27 18:37:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 102.10 — Mozilla
2023-04-11 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.10 — Mozilla
2023-04-11 00:00:00
ibm
ibm
hp
hp
HP ThinPro 8.0 SP 7 Security Updates
2024-01-26 00:00:00
oracle
oracle
Oracle Critical Patch Update Advisory - July 2023
2023-07-18 00:00:00