libwebp
11 vulnérabilités publiées citent ce produit.
Tel que les CNA l’écrivent dans leurs fiches CVE (éditeur et produit) ; les versions sont les leurs.
| CVE | Versions vulnérables | Titre | Sévérité | Publiée | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2018-25014 | libwebp 1.0.1 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol(). | CRITICAL 9.8 | 2.2 % | ||
| CVE-2018-25013 | libwebp 1.0.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes(). | CRITICAL 9.1 | 2.1 % | ||
| CVE-2018-25012 | libwebp 1.0.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24(). | CRITICAL 9.1 | 2.1 % | ||
| CVE-2018-25011 | libwebp 1.0.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16(). | CRITICAL 9.8 | 2.5 % | ||
| CVE-2018-25010 | libwebp 1.0.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter(). | CRITICAL 9.1 | 2.2 % | ||
| CVE-2018-25009 | libwebp 1.0.1 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16(). | CRITICAL 9.1 | 2.1 % | ||
| CVE-2020-36332 | libwebp 1.0.1 | A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threa | HIGH 7.5 | 2.0 % | ||
| CVE-2020-36331 | libwebp 1.0.1 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from t | CRITICAL 9.1 | 2.3 % | ||
| CVE-2020-36330 | libwebp 1.0.1 | A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat f | CRITICAL 9.1 | 2.2 % | ||
| CVE-2020-36329 | libwebp 1.0.1 | A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat | CRITICAL 9.8 | 2.3 % | ||
| CVE-2020-36328 | libwebp 1.0.1 | A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an inval | CRITICAL 9.8 | 2.7 % |