Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

5 records

Advisory: libwebp — DSA-4930 Clear all filters
TI-2020-18615 CVE-2020-36332 · GHSA-fx92-p77r-3r2c

Improper input validation in libwebp

Priority LOW 37

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01966 Published 2021-05-21 Partial fix CWE-20
TI-2020-18614 CVE-2020-36331 · GHSA-hrq2-3wxg-w5m6

Out-of-bounds read in libwebp

Priority MEDIUM 44

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.02302 Published 2021-05-21 Partial fix CWE-125
TI-2020-18613 CVE-2020-36330 · GHSA-478j-8hp8-fjpw

Out-of-bounds read in libwebp

Priority MEDIUM 44

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.0223 Published 2021-05-21 Partial fix CWE-125
TI-2020-18612 CVE-2020-36329 · GHSA-mprg-gw36-367p

Use after free in libwebp

Priority MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02319 Published 2021-05-21 Fixed CWE-416
TI-2020-18611 CVE-2020-36328 · GHSA-jxwm-333p-5cwx

Out-of-bounds write in libwebp

Priority MEDIUM 47

A flaw was found in libwebp in versions before 1.0.1.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02662 Published 2021-05-21 Fixed CWE-787