Webmproject

Records25All Threatist records

Exploited (KEV)2In CISA KEV

CVSS critical12CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Webmproject records in CISA KEV

TI-2023-04799 Google Chromium libvpx Heap Buffer Overflow Vulnerability CRITICAL 97KEV 2023-10-02 TI-2023-04477 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability CRITICAL 97KEV 2023-09-13

Components

Products in the NVD configurations · select one to filter the records

Libwebp 15 records CRITICAL Libvpx 6 records CRITICAL Libwebm 4 records MEDIUM

Records

15 records in Libwebp · all components

TI-2023-04477 CVE-2023-4863 · GHSA-j7hp-h8jx-5ppr

Out-of-bounds write in Google Chrome

CRITICAL 97KEV

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.99979 Published 2023-09-12 Partial fix · 116.0.5845.187, 1.3.2 +14 CWE-787

TI-2020-18612 CVE-2020-36329 · GHSA-mprg-gw36-367p

Use after free in libwebp

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02319 Published 2021-05-21 Fixed CWE-416

TI-2020-18611 CVE-2020-36328 · GHSA-jxwm-333p-5cwx

Out-of-bounds write in libwebp

MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02662 Published 2021-05-21 Fixed CWE-787

TI-2018-15238 CVE-2018-25011 · GHSA-vqgc-g267-8p6w

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

MEDIUM 47

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02513 Published 2021-05-21 Fixed CWE-787

TI-2018-15241 CVE-2018-25014 · GHSA-rr28-4v9r-6wcq

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

MEDIUM 46

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0223 Published 2021-05-21 Partial fix CWE-908

TI-2020-18614 CVE-2020-36331 · GHSA-hrq2-3wxg-w5m6

Out-of-bounds read in libwebp

MEDIUM 44

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02302 Published 2021-05-21 Partial fix CWE-125

TI-2020-18613 CVE-2020-36330 · GHSA-478j-8hp8-fjpw

Out-of-bounds read in libwebp

MEDIUM 44

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0223 Published 2021-05-21 Partial fix CWE-125

TI-2018-15237 CVE-2018-25010 · GHSA-g4fc-9486-f3m2

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

MEDIUM 44

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02235 Published 2021-05-21 Partial fix CWE-125

TI-2018-15240 CVE-2018-25013 · GHSA-xj9f-6qqc-cpfp

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

MEDIUM 43

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02051 Published 2021-05-21 Partial fix CWE-125

TI-2018-15239 CVE-2018-25012 · GHSA-x5pq-pm4r-vx73

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

MEDIUM 43

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02051 Published 2021-05-21 Partial fix CWE-125

TI-2018-15236 CVE-2018-25009 · GHSA-3rw8-24h2-6px6

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

MEDIUM 43

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.021 Published 2021-05-21 Partial fix CWE-125

TI-2020-18615 CVE-2020-36332 · GHSA-fx92-p77r-3r2c

Improper input validation in libwebp

LOW 37

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01966 Published 2021-05-21 Partial fix CWE-20

TI-2016-08074 CVE-2016-9969 · GHSA-fhhw-9rjc-7m26

In libwebp 0.5.1, there is a double free bug in libwebpmux.

LOW 36

In libwebp 0.5.1, there is a double free bug in libwebpmux.

CVSS 3.0HIGH 7.5 Network No auth User interaction EPSS 0.01411 Published 2019-05-23 No fix listed CWE-415

TI-2023-01881 CVE-2023-1999 · GHSA-8x9p-cw2c-6253

Use after free in libwebp

LOW 35

There exists a use after free/double free in libwebp.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00952 Published 2023-06-20 Partial fix · 1.3.1, 1.3.0-8-ga486d800 CWE-416

TI-2016-07439 CVE-2016-9085 · GHSA-6p8m-c6x4-m899

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

LOW 16

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00425 Published 2017-02-03 Will not fix CWE-190

Open these records in search →

Critical	12
High	8
Medium	4
Low	1
No CVSS	0