Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Webmproject Component: Libwebm Clear all filters
TI-2019-07138 CVE-2019-9746 · GHSA-4235-rv3m-2xwx

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions…

Priority LOW 36

In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a similar issue to CVE-2018-19212.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01644 Published 2019-03-13 No fix listed CWE-476
TI-2018-13634 CVE-2018-19212 · GHSA-8vqj-758h-qh3x

In libwebm through 2018-10-03, there is an abort caused by…

Priority LOW 30

In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack.

CVSS 3.0MEDIUM 6.5 Network No auth User interaction EPSS 0.0086 Published 2018-11-12 No fix listed CWE-670
TI-2018-04719 CVE-2018-6406 · GHSA-929q-cjpr-43v5

The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through…

Priority MEDIUM 42

The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02 Published 2018-01-30 Will not fix CWE-125