vulnerabilidad-LibWebP-CVE-2023-41064

漏洞-LibWebP-CVE-2023-41064 用于触发此CVE-2023-41064漏洞的代码长度 这是一个Python脚本，用于创建一个具有特定头部结构的空WebP（一种图像格式）文件。此脚本的目的是生成一个可用于测试或教育目的的WebP文件。 注意：此脚本仅供教育目的使用，不得用于恶意或非法用途。 先决条件 确保你的系统满足以下先决条件： 已安装Python 3.x。 系统中已安装WebP。（此要求对于脚本正常运行是必需的。） 使用 克隆或下载此仓库到你的系统。 打开终端并导航到crafteando.py文件的位置。 运行脚本，并提供输出的WebP文件名：...

CVE-2023-4863

CVE-2023-4863 root@kitploit: webpをチェックアウト git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ 脆弱性のあるバージョンをチェックアウト git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 AddressSanitizerを有効化 sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix webpをビルド make -f...

CVE-2023-4683-Test

CVE-2023-4683-Test Questa repo contiene un POC di facile utilizzo per CVE-2023-4683. Basta clonare questa repo con git ed estrarre webp-test oppure eseguire setup-webp-test.sh. webp-test contiene già i file necessari commit git 7ba44f80f3b94fc0138db159afea770ef06532a0 di...

Astra Linux – Vulnerability in exempi

A buffer overflow vulnerability exists in WEBPSupport.cpp in exempi 2.5.0 and earlier, allowing remote attackers to cause a denial of service by opening crafted webp files...

EUVD-2025-25737

Malicious code in bioql PyPI...

CVE-2025-52456

A memory corruption vulnerability exists in the WebP Image Decoding functionality of the SAIL Image Decoding Library v0.9.8. When loading a specially crafted .webp animation an integer overflow can be made to occur when calculating the stride for decoding. Afterwards, this will cause a heap-based...

RLSA-2024:3066 Moderate: exempi security update

Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with ID3V2 frame CVE-2020-18651 exempi: denial of service via opening of crafted webp file CVE-2020-18652 For more details about the security issues, including t...

RHEL 8 : exempi (RHSA-2024:3066)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2024:3066 advisory. Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with...

Moderate: Red Hat Security Advisory: exempi security update

An update for exempi is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Moderate. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the...

exempi: denial of service via opening of crafted webp file

A buffer overflow flaw was found in the exempi package. This issue occurs in WEBPSupport.cpp and may allow remote attackers to cause a denial of service via opening a crafted webp file...

ALSA-2024:3066 Moderate: exempi security update

Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with ID3V2 frame CVE-2020-18651 exempi: denial of service via opening of crafted webp file CVE-2020-18652 For more details about the security issues, including t...

Moderate: exempi security update

Exempi provides a library for easy parsing of XMP metadata. Security Fixes: exempi: denial of service via opening of crafted audio file with ID3V2 frame CVE-2020-18651 exempi: denial of service via opening of crafted webp file CVE-2020-18652 For more details about the security issues, including t...

RHEL 7 : exempi (Unpatched Vulnerability)

The remote Redhat Enterprise Linux 7 host has one or more packages installed that are affected by multiple vulnerabilities that have been acknowledged by the vendor but will not be patched. - exempi: denial of service via opening of crafted webp file CVE-2020-18652 - Buffer Overflow vulnerability...

@napi-rs/image affected by libwebp CVE

Impact Heap buffer overflow in libwebp allows a remote attacker to perform an out of bounds memory write via a crafted webp image. References - https://github.com/advisories/GHSA-j7hp-h8jx-5ppr - https://blog.isosceles.com/the-webp-0day/...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

libwebp: out-of-bounds write with a specially crafted WebP lossless file

This CVE ID has been rejected by its CVE Numbering Authority. Duplicate of CVE-2023-4863...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : exempi (SUSE-SU-2023:3518-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:3518-1 advisory. - CVE-2020-18652: Fixed buffer overflow vulnerability in WEBPSupport.cpp bsc1214488. Tenable has extracte...

CVE-2020-18652

A buffer overflow flaw was found in the exempi package. This issue occurs in WEBPSupport.cpp and may allow remote attackers to cause a denial of service via opening a crafted webp file. Mitigation Mitigation for this issue is either not available or the currently available options don't meet the...