Lucene search
K

20 matches found

AstraLinux
AstraLinux
added 2026/05/20 5:53 a.m.3 views

Astra Linux - уязвимость в libwebp

A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the ShiftBytes function...

9.1CVSS7.5AI score0.00575EPSS
Exploits0References2
AstraLinux
AstraLinux
added 2026/05/03 11:59 p.m.2 views

Astra Linux - уязвимость в libwebp

A flaw was discovered in libwebp in versions prior to 1.0.1. An out-of-bounds read was identified in the ChunkAssignData function. The greatest threat posed by this vulnerability is related to data confidentiality and service availability...

9.1CVSS7.3AI score0.00409EPSS
Exploits0References2
OSV
OSV
added 2025/09/29 1:58 p.m.1 views

CLSA-2025-1759154304 libwebp: Fix of 3 CVEs

CVE-2020-36329: fix use-after-free vulnerability by delaying thread termination - CVE-2020-36330: fix out-of-bounds read in ChunkVerifyAndAssign function - CVE-2020-36331: fix out-of-bounds read in ChunkAssignData function...

9.8CVSS7.3AI score0.00503EPSS
Exploits0References1
OSV
OSV
added 2025/09/23 8:15 a.m.3 views

CLSA-2025-1758615308 libwebp: Fix of CVE-2020-36328

CVE-2020-36328: fix a heap-based buffer overflow in WebPDecodeInto functions...

9.8CVSS7.5AI score0.00527EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2023/09/19 12:43 p.m.4 views

libwebp: Heap buffer overflow in WebP Codec

A heap-based buffer flaw was found in the way libwebp, a library used to process "WebP" image format data, processes certain specially formatted WebP images. An attacker could use this flaw to crash or execute remotely arbitrary code in an application such as a web browser compiled with this...

8.8CVSS7.6AI score0.93301EPSS
Exploits9References8
RedHat Linux
RedHat Linux
added 2023/09/19 8:5 a.m.2 views

libwebp: Heap buffer overflow in WebP Codec

A heap-based buffer flaw was found in the way libwebp, a library used to process "WebP" image format data, processes certain specially formatted WebP images. An attacker could use this flaw to crash or execute remotely arbitrary code in an application such as a web browser compiled with this...

8.8CVSS7.6AI score0.93301EPSS
Exploits9References8
RedHat Linux
RedHat Linux
added 2023/09/18 1:49 p.m.3 views

libwebp: Heap buffer overflow in WebP Codec

A heap-based buffer flaw was found in the way libwebp, a library used to process "WebP" image format data, processes certain specially formatted WebP images. An attacker could use this flaw to crash or execute remotely arbitrary code in an application such as a web browser compiled with this...

8.8CVSS7.6AI score0.93301EPSS
Exploits9References8
Redos
Redos
added 2021/09/08 12:0 a.m.3 views

ROS-2-2247

2.2247 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.3AI score0.00818EPSS
Exploits0
Redos
Redos
added 2021/09/08 12:0 a.m.3 views

ROS-2-2240

2.2240 Multiple vulnerabilities in libwebp 1. Vulnerability description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.03402EPSS
Exploits0
Redos
Redos
added 2021/09/08 12:0 a.m.2 views

ROS-2-2207

2.2207 Multiple vulnerabilities in libwebp 1. Vulnerability Description: CVE-2020-36332 A vulnerability in the libwebp library for encoding and decoding WebP images, is related to improper control of internal resource consumption. Exploitation of the vulnerability could allow an attacker acting...

9.8CVSS8.7AI score0.92579EPSS
Exploits81
RedHat Linux
RedHat Linux
added 2021/06/09 1:36 p.m.1 views

libwebp: heap-based buffer overflow in PutLE16()

A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.5AI score0.00376EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/06/09 12:32 a.m.2 views

libwebp: heap-based buffer overflow in PutLE16()

A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.5AI score0.00376EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2021/06/07 12:29 p.m.1 views

libwebp: heap-based buffer overflow in PutLE16()

A flaw was found in libwebp. A heap-based buffer overflow was found in PutLE16. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability...

9.8CVSS7.5AI score0.00376EPSS
Exploits0References4
Microsoft CVE
Microsoft CVE
added 2021/05/25 7:0 a.m.1 views

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

...

9.8CVSS7AI score0.00527EPSS
Exploits0
OSV
OSV
added 2021/05/21 5:15 p.m.1 views

DEBIAN-CVE-2020-36330

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability...

9.1CVSS8AI score0.00402EPSS
Exploits0References1
CNNVD
CNNVD
added 2021/05/21 12:0 a.m.1 views

libwebp 缓冲区错误漏洞

Libwebp is a WebP image format encoding and decoding library . A security vulnerability exists in versions of Libwebp prior to 1.0.1. An attacker could exploit the vulnerability to threaten data confidentiality and service availability...

9.1CVSS7.4AI score0.00447EPSS
Exploits0References28
CNNVD
CNNVD
added 2021/05/21 12:0 a.m.0 views

libwebp 资源管理错误漏洞

Libwebp is a WebP image format encoding and decoding library . A buffer overflow vulnerability exists in Libwebp versions prior to 1.0.1, which stems from libwebp allocating too much memory when reading a file and can be exploited by an attacker to cause a service crash...

7.5CVSS7.5AI score0.00818EPSS
Exploits0References17
PyPA
PyPA
added 2019/05/23 6:29 p.m.5 views

PYSEC-2019-256

In libwebp 0.5.1, there is a double free bug in libwebpmux...

7.5CVSS6.9AI score0.00206EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2018/11/22 12:0 a.m.1 views

PT-2020-6124 · Google +9 · Libwebp +9

Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A flaw was found in libwebp, related to an out-of-bounds read in the ChunkAssignData function. This issue poses a threat to data confidentiality and service availability. Exploitation of this flaw...

9.8CVSS7.8AI score0.00818EPSS
Exploits0References142
Positive Technologies
Positive Technologies
added 2018/11/22 12:0 a.m.1 views

PT-2018-3680 · Google +9 · Libwebp +9

Name of the Vulnerable Software and Affected Versions: libwebp versions prior to 1.0.1 Description: A heap-based buffer overflow was found in the ApplyFilter function, which can be exploited by creating a specially crafted file, allowing a remote attacker to access confidential information. This...

9.8CVSS8.1AI score0.00818EPSS
Exploits0References136
Rows per page
Query Builder