Read the docs

Webmproject

Records25All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Webmproject records in CISA KEV
TI-2023-04799 Google Chromium libvpx Heap Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2023-10-02TI-2023-04477 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2023-09-13

Components

Products in the NVD configurations · select one to filter the records
Libwebp 15 records CRITICAL Libvpx 6 records CRITICAL Libwebm 4 records MEDIUM

Records

4 records in Libwebm · all components

TI-2018-04719 CVE-2018-6406 · GHSA-929q-cjpr-43v5

The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through…

Priority MEDIUM 42

The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02 Published 2018-01-30 Will not fix CWE-125
TI-2019-07138 CVE-2019-9746 · GHSA-4235-rv3m-2xwx

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions…

Priority LOW 36

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01644 Published 2019-03-13 No fix listed CWE-476
TI-2018-13634 CVE-2018-19212 · GHSA-8vqj-758h-qh3x

In libwebm through 2018-10-03, there is an abort caused by…

Priority LOW 30

In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0086 Published 2018-11-12 No fix listed CWE-670
Open these records in search →