CVE-2023-1999

AFFECTED SOFTWARE: libwebp library. VULNERABILITY: use-after-free/double-free in the VP8/ApplyFiltersAndEncode path. ROOT CAUSE: memory mismanagement leading to a double free when freeing best.bw and a trailing trial pointer, with AddressSanitizer detecting a double free. IMPACT: potential memory...

CVE-2020-36332

CVE-2020-36332 affects the libwebp library (versions before 1.0.1). The issue is an excessive memory allocation when reading a file, as described across multiple connected advisories (e.g., AlmaLinux, Debian DSA, CNVD). Impact is primarily availability-related (denial of service potential). Affec...

CVE-2016-9969

CVE-2016-9969 is a memory-management vulnerability in libwebp 0.5.1, specifically a double free in libwebpmux. Red Hat and SUSE advisories and other vendor/NVD records consistently reference a double-free issue (e.g., SetFrame() path noted by SUSE). Public details across connected documents confi...