1058 matches found
SUSE SLES12 Security Update : libwebp (SUSE-SU-2021:1830-1)
This update for libwebp fixes the following issues : CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign bsc1185691. CVE-2020-36332: Fixed extreme memory allocation when reading a file bsc1185674...
SUSE-SU-2021:1830-1 Security update for libwebp
This update for libwebp fixes the following issues: - CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter bsc1185685. - CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign bsc1185691. - CVE-2020-36332: Fixed extreme memory allocation when reading a file bsc1185674...
USN-4971-1 libwebp vulnerabilities
It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause libwebp to crash, resulting in a denial of service, or possibly execute arbitrary co...
USN-4971-1: libwebp vulnerabilities
It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a specially crafted image file, a remote attacker could use this issue to cause libwebp to crash, resulting in a denial of service, or possibly execute arbitrary co...
Ubuntu 18.04 LTS / 20.04 LTS : libwebp vulnerabilities (USN-4971-1)
The remote Ubuntu 18.04 LTS / 20.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4971-1 advisory. It was discovered that libwebp incorrectly handled certain malformed images. If a user or automated system were tricked into opening a...
Photon OS 3.0: Libwebp PHSA-2021-3.0-0244
An update of the libwebp package has been released. C Tenable, Inc. The descriptive text and package checks in this plugin were extracted from VMware Security Advisory PHSA-2021-3.0-0244. The text itself is copyright C VMware, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if...
Critical Photon OS Security Update - PHSA-2021-3.0-0244
Updates of 'libwebp' packages of Photon OS have been released...
Critical Photon OS Security Update - PHSA-2021-0244
Updates of 'libwebp' packages of Photon OS have been released...
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
...
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
...
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
...
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
...
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
...
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
...
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
...
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
...
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
...
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
...
Libwebp Reuse After Release Vulnerability
Libwebp is a WebP image format encoding and decoding library . A post-release reuse vulnerability exists in Libwebp versions prior to 1.0.1. An attacker could exploit this vulnerability to affect confidentiality, integrity, and availability...
Libwebp out-of-bounds read vulnerability (CNVD-2021-37661)
Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...