A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

...

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.

...

Libwebp Reuse After Release Vulnerability

Libwebp is a WebP image format encoding and decoding library . A post-release reuse vulnerability exists in Libwebp versions prior to 1.0.1. An attacker could exploit this vulnerability to affect confidentiality, integrity, and availability...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37661)

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp Buffer Overflow Vulnerability

Libwebp is a WebP image format encoding and decoding library . A buffer overflow vulnerability exists in Libwebp versions prior to 1.0.1, which stems from libwebp allocating too much memory when reading a file and can be exploited by an attacker to cause a service crash...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37657)

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37654)

Libwebp is a WebP image format encoding and decoding library . An out-of-bounds read vulnerability exists in Libwebp versions prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37659)

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp Heap Buffer Overflow Vulnerability

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of libwebp prior to 1.0.1. An attacker can exploit the vulnerability to affect data confidentiality, integrity, and system availability...

Libwebp Uninitialized Variable Usage Vulnerability

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. The vulnerability stems from the use of a single variable in the ReadSymbol function. An attacker could exploit the vulnerability to threaten data confidentiality...

Libwebp heap buffer overflow vulnerability (CNVD-2021-37655)

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. The vulnerability stems from a heap buffer overflow in the WebPDecodeRGBInto function, caused by an invalid check of the buffer size. An attacker can exploit the...

Libwebp out-of-bounds read vulnerability (CNVD-2021-37656)

Libwebp is a WebP image format encoding and decoding library . Libwebp versions prior to 1.0.1 are fully vulnerable. An attacker can exploit the vulnerability to threaten data confidentiality and service availability...

Libwebp Out-of-Bounds Read Vulnerability

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. The vulnerability stems from a read out-of-bounds in WebPMuxCreateInternal and can be exploited by an attacker to threaten data confidentiality and service...

CVE-2018-25009

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16...

CVE-2018-25013

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes...

CVE-2018-25011

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16...

CVE-2018-25014

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol...

CVE-2020-36332

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability...

CVE-2020-36329

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

CVE-2020-36330

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability...