Priority CRITICAL 97KEV
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.99979 · Published 2023-09-12 · Partial fix · 116.0.5845.187, 1.3.2 +14 CWE-787
Priority LOW 35
There exists a use after free/double free in libwebp.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.00952 · Published 2023-06-20 · Partial fix · 1.3.1, 1.3.0-8-ga486d800 CWE-416
Priority MEDIUM 46
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.0223 · Published 2021-05-21 · Partial fix CWE-908
Priority MEDIUM 43
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02051 · Published 2021-05-21 · Partial fix CWE-125
Priority MEDIUM 43
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02051 · Published 2021-05-21 · Partial fix CWE-125
Priority MEDIUM 47
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02513 · Published 2021-05-21 · Fixed CWE-787
Priority MEDIUM 44
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02235 · Published 2021-05-21 · Partial fix CWE-125
Priority MEDIUM 43
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.021 · Published 2021-05-21 · Partial fix CWE-125
Priority LOW 37
A flaw was found in libwebp in versions before 1.0.1.
CVSS 3.1HIGH 7.5· Network · No auth · No interaction · EPSS 0.01966 · Published 2021-05-21 · Partial fix CWE-20
Priority MEDIUM 44
A flaw was found in libwebp in versions before 1.0.1.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.02302 · Published 2021-05-21 · Partial fix CWE-125
Priority MEDIUM 44
A flaw was found in libwebp in versions before 1.0.1.
CVSS 3.1CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.0223 · Published 2021-05-21 · Partial fix CWE-125
Priority MEDIUM 47
A flaw was found in libwebp in versions before 1.0.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02319 · Published 2021-05-21 · Fixed CWE-416
Priority MEDIUM 47
A flaw was found in libwebp in versions before 1.0.1.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02662 · Published 2021-05-21 · Fixed CWE-787
Priority LOW 36
In libwebp 0.5.1, there is a double free bug in libwebpmux.
CVSS 3.0HIGH 7.5· Network · No auth · User interaction · EPSS 0.01411 · Published 2019-05-23 · No fix listed CWE-415
Priority LOW 16
Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
CVSS 3.1LOW 3.3· Local · Low privileges · No interaction · EPSS 0.00425 · Published 2017-02-03 · Will not fix CWE-190
THREATIST.IORead the docs