Rocky Linux 8 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel Multiple Vulnerabilities (crlsa-2021_4231)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214231 advisory. libwebp: out-of-bounds read in WebPMuxCreateInternal CVE-2018-25009 libwebp: out-of-bounds read in ApplyFilter CVE-2018-25010 libwebp: out-of-bounds read i...

OSV-2024-1356 Heap-buffer-overflow in ChunkAssignData

OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=382816119 Crash type: Heap-buffer-overflow READ 1 Crash state: ChunkAssignData WebPMuxCreateInternal MuxDemuxApiTest...

Out-of-bounds Read

Libwebp is vulnerable to Out-of-bounds Read. The vulnerability exists in the WebPMuxCreateInternal, allowing an attacker to read memory values its leads to information disclosure...

Out-of-bounds Read

libwebp is vulnerable to Out-of-bounds Reads. The vulnerability exists in WebPMuxCreateInternal function which allows an attacker to read confidential data in the system...

libwebp: out-of-bounds read in WebPMuxCreateInternal()

A flaw was found in libwebp. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability...

CVE-2018-25009

A flaw was found in libwebp. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability...

CVE-2018-25012

A flaw was found in libwebp. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability...