Search for packages
| purl | pkg:deb/debian/libwebp@0.6.1-2.1%2Bdeb11u2 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5hzf-gdbj-8ud8 | Double Free There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. |
CVE-2023-1999
|
| VCID-6z14-frdw-r3dh | libwebp: out-of-bounds read in ApplyFilter() |
CVE-2018-25010
|
| VCID-8nht-54x7-gqf1 | libwebp: excessive memory allocation when reading a file |
CVE-2020-36332
|
| VCID-9jcb-yrmd-7uen | libwebp: heap-based buffer overflow in WebPDecode*Into functions |
CVE-2020-36328
|
| VCID-e3uc-36mx-mbfv | libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c |
CVE-2020-36330
|
| VCID-ecku-fk4j-s3hr | libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c |
CVE-2020-36331
|
| VCID-hjha-gt3s-s3e3 | libwebp: use of uninitialized value in ReadSymbol() |
CVE-2018-25014
|
| VCID-k4yg-g6p1-kkbz | libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c |
CVE-2020-36329
|
| VCID-ms2y-xj5p-4ud9 | libwebp: out-of-bounds read in WebPMuxCreateInternal() |
CVE-2018-25012
|
| VCID-t16b-mbs7-wfc1 | libwebp: heap-based buffer overflow in PutLE16() |
CVE-2018-25011
|
| VCID-vdzj-kqfy-d3b7 | libwebp: OOB write in BuildHuffmanTable Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
CVE-2023-4863
GHSA-j7hp-h8jx-5ppr |
| VCID-wcer-d6dm-w3ch | libwebp: out-of-bounds read in WebPMuxCreateInternal |
CVE-2018-25009
|
| VCID-yjus-jmfg-tyfv | libwebp: out-of-bounds read in ShiftBytes() |
CVE-2018-25013
|