1058 matches found
Out-of-bounds
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability...
Design/Logic Flaw
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability...
Heap overflow
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24...
Heap overflow
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter...
Heap overflow
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...
Heap overflow
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes...
Design/Logic Flaw
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability...
Heap overflow
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...
CVE-2018-25014
CVE-2018-25014 affects the libwebp library: a use of an uninitialized value is present in ReadSymbol() in versions before 1.0.1. The issue is documented across multiple advisories (e.g., ALAS2/AlmaLinux notices) and is associated with libwebp data integrity/confidentiality/availability risks. A f...
CVE-2018-25014
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol...
CVE-2018-25014
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol...
CVE-2018-25013
CVE-2018-25013 is a heap-based buffer overflow in libwebp’s ShiftBytes() found in versions before 1.0.1. The issue affects libwebp (WebP codec library) and can lead to memory corruption in image processing. Public references in multiple advisories confirm the vulnerability and recommend upgrading...
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes...
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes...
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24...
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24...
CVE-2018-25012
CVE-2018-25012 : A heap-based buffer overflow is present in libwebp’s GetLE24() in versions prior to 1.0.1. Affected component: libwebp library. Remediation: upgrade to libwebp 1.0.1 or newer (various advisories note this patch). Note: connected documents corroborate the issue across multiple ven...
CVE-2018-25011
CVE-2018-25011 affects libwebp prior to 1.0.1. Root cause: heap-based buffer overflow in PutLE16() that can affect data confidentiality, integrity, and availability. Documentation indicates a patch/update to version 1.0.1 or later; downstream advisories reference this fix in various Linux distrib...