Lucene search
+L

1058 matches found

Redos
Redos
added 2023/07/06 12:00 a.m.15 views

ROS-2-1550

2.1550 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS10AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.14 views

ROS-2-1809

2.1809 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.12 views

ROS-2-1897

2.1897 Multiple vulnerabilities of libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.6AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.37 views

ROS-2-533

2.533 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS9.4AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.19 views

ROS-2-1733

2.1733 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.6AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.14 views

ROS-2-1481

2.1481 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.6 views

ROS-2-2124

2.2124 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS9.6AI score0.02662EPSS
SaveExploits0
Redos
Redos
added 2023/07/06 12:00 a.m.28 views

ROS-2-855

2.855 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS10AI score0.02662EPSS
SaveExploits0
Tenable Nessus
Tenable Nessus
added 2023/06/21 12:00 a.m.32 views

SUSE SLES12: libwebp-devel / libwebp5 / libwebp5-32bit / libwebpdecoder1 / etc (SUSE-SU-2023:2552-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:2552-1 advisory. - CVE-2023-1999: Fixed double free bsc1210212. Tenable has extracted the preceding description block directly from the SUSE security advisor...

7.5CVSS6.8AI score0.00952EPSS
SaveExploits0References4
OSV
OSV
added 2023/06/20 12:15 p.m.12 views

AZL-27181 CVE-2023-1999 affecting package libwebp for versions less than 1.3.2-1

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

7.5CVSS7.2AI score0.00952EPSS
SaveExploits0References1
OSV
OSV
added 2023/06/20 12:15 p.m.6 views

ALPINE-CVE-2023-1999

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

7.5CVSS9.1AI score0.00952EPSS
SaveExploits0References1
NVD
NVD
added 2023/06/20 12:15 p.m.12 views

CVE-2023-1999

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

7.5CVSS6.4AI score0.00952EPSS
SaveExploits0References2
OSV
OSV
added 2023/06/20 12:15 p.m.3 views

DEBIAN-CVE-2023-1999

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

7.5CVSS6.6AI score0.00952EPSS
SaveExploits0References1
Prion
Prion
added 2023/06/20 12:15 p.m.30 views

Double free

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

5CVSS8AI score0.00952EPSS
SaveExploits0References2Affected Software1
Vulnrichment
Vulnrichment
added 2023/06/20 11:28 a.m.16 views

CVE-2023-1999 Use after free in libwebp

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

5.3CVSS7AI score0.00952EPSS
SaveExploits0References2
Cvelist
Cvelist
added 2023/06/20 11:28 a.m.46 views

CVE-2023-1999 Use after free in libwebp

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

5.3CVSS7.9AI score0.00952EPSS
SaveExploits0References2
AlpineLinux
AlpineLinux
added 2023/06/20 11:28 a.m.45 views

CVE-2023-1999

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

7.5CVSS7.5AI score0.00952EPSS
SaveExploits0
Debian CVE
Debian CVE
added 2023/06/20 11:28 a.m.31 views

CVE-2023-1999

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...

7.5CVSS8.4AI score0.00952EPSS
SaveExploits0
CVE
CVE
added 2023/06/20 11:28 a.m.2551 views

CVE-2023-1999

AFFECTED SOFTWARE: libwebp library. VULNERABILITY: use-after-free/double-free in the VP8/ApplyFiltersAndEncode path. ROOT CAUSE: memory mismanagement leading to a double free when freeing best.bw and a trailing trial pointer, with AddressSanitizer detecting a double free. IMPACT: potential memory...

7.5CVSS7.2AI score0.00952EPSS
SaveExploits0References2Affected Software1
OSV
OSV
added 2023/06/20 7:50 a.m.3 views

SUSE-SU-2023:2552-1 Security update for libwebp

This update for libwebp fixes the following issues: - CVE-2023-1999: Fixed double free bsc1210212...

7.5CVSS8.2AI score0.00952EPSS
SaveExploits0References3
Rows per page
Query Builder