libwebp: heap-based buffer overflow in WebPDecode*Into functions

A flaw was found in libwebp. A heap-based buffer overflow in functions WebPDecodeInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Important: Red Hat Security Advisory: libwebp security update

An update for libwebp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

libwebp: heap-based buffer overflow in WebPDecode*Into functions

A flaw was found in libwebp. A heap-based buffer overflow in functions WebPDecodeInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2018-25014 affecting package libwebp 1.0.0-4

CVE-2018-25014 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2020-36332 affecting package libwebp 1.0.0-4

CVE-2020-36332 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2018-25009 affecting package libwebp 1.0.0-4

CVE-2018-25009 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2020-36329 affecting package libwebp 1.0.0-4

CVE-2020-36329 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2020-36331 affecting package libwebp 1.0.0-4

CVE-2020-36331 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2018-25010 affecting package libwebp 1.0.0-4

CVE-2018-25010 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2018-25011 affecting package libwebp 1.0.0-4

CVE-2018-25011 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2018-25012 affecting package libwebp 1.0.0-4

CVE-2018-25012 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2020-36328 affecting package libwebp 1.0.0-4

CVE-2020-36328 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2020-36330 affecting package libwebp 1.0.0-4

CVE-2020-36330 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

CVE-2018-25013 affecting package libwebp 1.0.0-4

CVE-2018-25013 affecting package libwebp 1.0.0-4. An upgraded version of the package is available that resolves this issue...

Important: Red Hat Security Advisory: libwebp security update

An update for libwebp is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

libwebp: heap-based buffer overflow in WebPDecode*Into functions

A flaw was found in libwebp. A heap-based buffer overflow in functions WebPDecodeInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c

A flaw was found in libwebp. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

Oracle Linux 7 : qt5-qtimageformats (ELSA-2021-2328)

The remote Oracle Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2021-2328 advisory. 5.9.7-2 - libwebp security fixes: Resolves: bz1961742 Resolves: bz1961743 Resolves: bz1961744 Resolves: bz1961745 Tenable has extracted the preceding...