1135 matches found
SUSE CVE-2023-1999
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to tria...
CVE-2017-17913
In GraphicsMagick 1.4 snapshot-20171217 Q8, there is a stack-based buffer over-read in WriteWEBPImage in coders/webp.c, related to an incompatibility with libwebp versions, 0.5.0 and later, that use a different structure type...
Fortinet FortiClient CVE-2023-4863 - Heap overflow in Chrome/libwebp (FG-IR-23-381)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-381 advisory. - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to...
Fortinet FortiClient CVE-2023-4863 - Heap overflow in Chrome/libwebp (FG-IR-23-381) (macOS)
The version of FortiClient installed on the remote host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the FG-IR-23-381 advisory. - Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to...
libwebp:[email protected]: Heap-buffer-overflow in ChunkAssignData
Project: https://chromium.googlesource.com/webm/libwebp Detailed Report: https://oss-fuzz.com/testcase?key=6136120099799040 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzerasanlibwebp Platform Id: linux Crash Type:...
libwebp:[email protected]: Use-of-uninitialized-value in png_sig_cmp
Detailed Report: https://oss-fuzz.com/testcase?key=5712101228740608 Project: libwebp Fuzzing Engine: libFuzzer Fuzz Target: [email protected] Job Type: libfuzzermsanlibwebp Platform Id: linux Crash Type: Use-of-uninitialized-value Crash Address: Crash State: pngsigcmp pngreadsig...
CentOS 7 : libwebp (RHSA-2021:2260)
The remote CentOS Linux 7 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2021:2260 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16. CVE-2018-25011 - A flaw was found in libwebp in versions befor...
RHSA-2023:5214 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:5222 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:5189 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:5309 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:5236 Red Hat Security Advisory: libwebp: critical security update
Bulletin has no description...
RHSA-2023:5204 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:5190 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:2076 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:2072 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:2073 Red Hat Security Advisory: libwebp security update
Bulletin has no description...
RHSA-2023:2075 Red Hat Security Advisory: libwebp security update
Bulletin has no description...