Lucene search
K

3 matches found

Github Security Blog
Github Security Blog
added 2023/10/06 8:46 p.m.111 views

Vulnerable version of libwebp and can be exploited with a malicious source image

Impact This vulnerability affects deployments of FreeImage that involve decoding or processing malicious source .webp files. If you only process your own trusted files, this should not affect you, but you should remove FreeImage from your project, as it is not maintained and presents a massive...

8.8CVSS8.4AI score0.93301EPSS
Exploits9References6Affected Software1
OSV
OSV
added 2023/10/06 8:46 p.m.28 views

GHSA-WQCR-XM43-HPQR Vulnerable version of libwebp and can be exploited with a malicious source image

Impact This vulnerability affects deployments of FreeImage that involve decoding or processing malicious source .webp files. If you only process your own trusted files, this should not affect you, but you should remove FreeImage from your project, as it is not maintained and presents a massive...

8.8CVSS7.4AI score0.93301EPSS
Exploits9References6
Github Security Blog
Github Security Blog
added 2023/09/27 9:16 p.m.82 views

Imageflow affected by libwebp zero-day and should not be used with malicious source images.

Impact This vulnerability affects deployments of Imageflow that involve decoding or processing malicious source .webp files. If you only process your own trusted files, this should not affect you but you should update anyway. Imageflow relies on Google's libwebp library to decode .webp images, an...

8.8CVSS6.7AI score0.93301EPSS
Exploits9References3Affected Software21
Rows per page
Query Builder