Lucene search
K

767 matches found

BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.2 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.02302EPSS
Exploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.1 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.0223EPSS
Exploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.2 views

The vulnerability of the libwebp library lies in its ability to allow arbitrary code execution during image encoding and decoding in the WebP format. This vulnerability stems from the use of memory after the library is freed, which enables attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to the use of memory after it is freed. Exploiting this vulnerability could allow a remote attacker to execute arbitrary code by creating a specially crafted file...

10CVSS8.2AI score0.02228EPSS
Exploits0References13Affected Software5
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.1 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which involves reading beyond the buffer in memory, allows attackers to access confidential information.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to reading beyond the buffer boundaries in memory. Exploiting this vulnerability can allow a remote attacker to gain access to confidential information by creating a specially crafted file...

4.2CVSS7.9AI score0.02051EPSS
Exploits0References10Affected Software3
BDU FSTEC
BDU FSTEC
added 2021/06/18 12:0 a.m.3 views

The vulnerability of the libwebp library regarding the encoding and decoding of WebP images, which is related to buffer overflow in the “heap”, allows attackers to execute arbitrary code.

The vulnerability of the libwebp library for encoding and decoding WebP images is related to buffer overflow in the “bucket” mechanism. Exploiting this vulnerability could allow an attacker to execute arbitrary code by creating a specially crafted file...

10CVSS8.5AI score0.02414EPSS
Exploits0References12Affected Software5
OpenVAS
OpenVAS
added 2021/06/15 12:0 a.m.30 views

CentOS: Security Advisory for qt5-qtimageformats (CESA-2021:2328)

The remote host is missing an update for the Copyright C 2021 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

9.8CVSS8.9AI score0.02558EPSS
Exploits0References2
Cent OS
Cent OS
added 2021/06/14 6:46 p.m.93 views

qt5 security update

CentOS Errata and Security Advisory CESA-2021:2328 An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detail...

9.8CVSS7.1AI score0.02558EPSS
Exploits0References7
Jake Archibald's Blog
Jake Archibald's Blog
added 2021/06/11 1:0 a.m.180 views

Halve the size of images by optimising for high density displays

A long time ago we had monitors of varying resolutions, but once we started to go beyond 1024x768, screens started to get bigger as resolution got bigger. Then full-colour web-capable mobile phones arrived, but the story was the same. They had small screens, but also small resolutions. Then in 20...

6.7AI score
Exploits0
RedHat Linux
RedHat Linux
added 2021/06/09 1:55 p.m.73 views

Important: Red Hat Security Advisory: libwebp security update

An update for libwebp is now available for Red Hat Enterprise Linux 8.2 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.1AI score0.02558EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/06/09 1:55 p.m.2 views

libwebp: heap-based buffer overflow in WebPDecode*Into functions

A flaw was found in libwebp. A heap-based buffer overflow in functions WebPDecodeInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.5AI score0.02558EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/06/09 1:36 p.m.2 views

libwebp: heap-based buffer overflow in PutLE16()

A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.5AI score0.02414EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/06/09 1:36 p.m.139 views

Important: Red Hat Security Advisory: libwebp security update

An update for libwebp is now available for Red Hat Enterprise Linux 8.1 Extended Update Support. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for...

9.8CVSS7.1AI score0.02558EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/06/09 12:32 a.m.9 views

libwebp: heap-based buffer overflow in PutLE16()

A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.5AI score0.02414EPSS
Exploits0References4
OpenVAS
OpenVAS
added 2021/06/09 12:0 a.m.16 views

SUSE: Security Advisory (SUSE-SU-2016:2683-2)

The remote host is missing an update for the SPDX-FileCopyrightText: 2021 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

9.8CVSS7.6AI score0.05101EPSS
Exploits0References2
AlmaLinux
AlmaLinux
added 2021/06/08 11:31 p.m.92 views

Important: libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format RIFF. Webmasters, web...

7.5CVSS2.5AI score0.02558EPSS
Exploits0References3
OSV
OSV
added 2021/06/08 11:31 p.m.31 views

RLSA-2021:2354 Important: libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format RIFF. Webmasters, web...

9.8CVSS8.2AI score0.02558EPSS
Exploits0References4
Rockylinux
Rockylinux
added 2021/06/08 11:31 p.m.45 views

libwebp security update

An update is available for libwebp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libwebp packages provide a library and tools for the WebP graphics format...

9.8CVSS9.7AI score0.02558EPSS
Exploits0
RedHat Linux
RedHat Linux
added 2021/06/08 10:42 p.m.48 views

Important: Red Hat Security Advisory: qt5-qtimageformats security update

An update for qt5-qtimageformats is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each...

9.8CVSS7.1AI score0.02558EPSS
Exploits0References5
RedHat Linux
RedHat Linux
added 2021/06/07 12:29 p.m.4 views

libwebp: heap-based buffer overflow in PutLE16()

A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.5AI score0.02414EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2021/05/25 7:0 a.m.4 views

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...

9.8CVSS7AI score0.02558EPSS
Exploits0
Rows per page
Query Builder