1041 matches found
PT-2018-3683 · Google +9 · Libwebp +9
Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A heap-based buffer overflow was found in libwebp, related to a buffer overflow issue when reading beyond the buffer boundaries in memory. This issue can be exploited by a remote attacker to gain...
PT-2020-6125 · Google +9 · Libwebp +9
Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A flaw in libwebp can cause excessive memory allocation when reading a file, leading to a threat to service availability. The vulnerability is related to uncontrolled resource consumption and can b...
PT-2020-6121 · Google +8 · Libwebp +8
Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: The issue is related to a heap-based buffer overflow in the WebPDecodeRGBInto function due to an invalid check for buffer size. This can allow a remote attacker to execute arbitrary code by creatin...
PT-2020-6122 · Google +8 · Libwebp +8
Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A flaw was found in libwebp due to a use-after-free caused by a thread being killed too early. The highest threat from this issue is to data confidentiality and integrity as well as system...
PT-2018-3684 · Google +8 · Libwebp +8
Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: The issue is related to the use of an uninitialized variable in the libwebp library, which is used for encoding and decoding WebP images. This could allow a remote attacker to execute arbitrary cod...
PT-2018-3681 · Google +8 · Libwebp +8
Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: The issue is related to a heap-based buffer overflow in the libwebp library, which is used for encoding and decoding WebP images. This overflow can be exploited by a remote attacker to execute...
libwebp/fuzz_advanced_api: Use-of-uninitialized-value in ReadSymbol
Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5760292385456128 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzadvancedapi Fuzz target binary: fuzzadvancedapi Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type:...
libwebp/fuzz_advanced_api: Heap-use-after-free in ShiftBytes
Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5638028289638400 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzadvancedapi Fuzz target binary: fuzzadvancedapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-use-after-fre...
libwebp/fuzz_demux_api: Heap-buffer-overflow in GetLE24
Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5095485239984128 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzdemuxapi Fuzz target binary: fuzzdemuxapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overflow REA...
libwebp/fuzz_demux_api: Heap-buffer-overflow in PutLE16
Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=6323357770317824 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzdemuxapi Fuzz target binary: fuzzdemuxapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overflow WRI...
libwebp/fuzz_advanced_api: Heap-buffer-overflow in ApplyFilter
Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5091562122903552 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzadvancedapi Fuzz target binary: fuzzadvancedapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overfl...
libwebp/fuzz_demux_api: Heap-buffer-overflow in GetLE16
Project: https://chromium.googlesource.com/webm/libwebp Detailed report: https://oss-fuzz.com/testcase?key=5660739309142016 Project: libwebp Fuzzer: libFuzzerlibwebpfuzzdemuxapi Fuzz target binary: fuzzdemuxapi Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type: Heap-buffer-overflow REA...
CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
DEBIAN-CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
UBUNTU-CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
CVE-2017-17913
CVE-2017-17913 affects GraphicsMagick, specifically a stack-based buffer over-read in WriteWEBPImage (coders/webp.c) caused by incompatibility with libwebp versions 0.5.0 and later. The description in the initial document notes GraphicsMagick 1.4 snapshot-20171217 Q8 as affected. Connected docume...
CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
