Security update for libwebp (critical)

openSUSE Security Update: Security update for libwebp Announcement ID: openSUSE-SU-2021:1860-1 Rating: critical References: 1185652 1185654 1185673 1185674 1185685 1185686 1185688 1185690 1185691 1186247 Cross-References: CVE-2018-25009 CVE-2018-25010 CVE-2018-25011 CVE-2018-25012 CVE-2018-25013...

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2021-2104)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Advisory ROSA-SA-2021-1902

Software: libwebp 0.3.0 OS: Cobalt 7.9 CVE-ID: CVE-2016-9085 CVE-Crit: LOW CVE-DESC: multiple integer overflow in libwebp allows attackers to have undefined impact via unknown vectors. CVE-STATUS: default CVE-REV: default...

EulerOS Virtualization for ARM 64 3.0.2.0 : libwebp (EulerOS-SA-2021-2104)

According to the versions of the libwebp package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities : - A flaw was found in libwebp. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this...

Important: libwebp

Issue Overview: A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2018-25011 A flaw was found in libwebp in versions before 1.0.1. A heap-based...

Important: qt5-qtimageformats

Issue Overview: A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability. CVE-2018-25011 A flaw was found in libwebp in versions before 1.0.1. An unitialized...

Amazon Linux 2 : libwebp (ALAS-2021-1676)

The version of libwebp installed on the remote host is prior to 0.3.0-10. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1676 advisory. A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerabilit...

Amazon Linux 2 : qt5-qtimageformats (ALAS-2021-1679)

The version of qt5-qtimageformats installed on the remote host is prior to 5.9.2-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2-2021-1679 advisory. A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this...

libwebp:advanced_api_fuzzer: Negative-size-param in WebPRescalerInit

Detailed Report: https://oss-fuzz.com/testcase?key=5193837222952960 Project: libwebp Fuzzing Engine: afl Fuzz Target: advancedapifuzzer Job Type: aflasanlibwebp Platform Id: linux Crash Type: Negative-size-param Crash Address: Crash State: WebPRescalerInit AllocateAndInitRescaler VP8LDecodeImage...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which is related to buffer overflow in the “heap”, allows attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to buffer overflow in the “bucket” mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code by creating a specially crafted file...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which is related to buffer overflow in the “heap”, allows attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to buffer overflow in the “bucket” mechanism. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by creating a specially crafted file...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

The vulnerability of the libwebp library lies in its ability to allow arbitrary code execution during image encoding and decoding in the WebP format. This vulnerability stems from the use of memory after the library is freed, which enables attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by creating a specially crafted file...

The vulnerability of the libwebp library lies in its ability to encode and decode WebP images, which involves the use of an uninitialized variable. This allows attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to the use of an uninitialized variable. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code...

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images allows for uncontrolled resource consumption, enabling attackers to cause service failures.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to an uncontrolled resource consumption. Exploiting this vulnerability could allow a remote attacker to cause service interruptions...

RHEL 8 : libwebp (RHSA-2021:2354)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2354 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...

RHEL 8 : libwebp (RHSA-2021:2365)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2365 advisory. The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital...