Search for packages
| purl | pkg:deb/debian/libwebp@1.2.4-0.2%2Bdeb12u1?distro=trixie |
| Vulnerability | Summary | Fixed by |
|---|---|---|
| This package is not known to be affected by vulnerabilities. | ||
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-5hzf-gdbj-8ud8 | Double Free There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. |
CVE-2023-1999
|
| VCID-6z14-frdw-r3dh | libwebp: out-of-bounds read in ApplyFilter() |
CVE-2018-25010
|
| VCID-8nht-54x7-gqf1 | libwebp: excessive memory allocation when reading a file |
CVE-2020-36332
|
| VCID-9jcb-yrmd-7uen | libwebp: heap-based buffer overflow in WebPDecode*Into functions |
CVE-2020-36328
|
| VCID-c6sz-91cq-8yfx | An integer overflow vulnerability in WebP could lead to arbitrary code execution or Denial of Service. |
CVE-2012-5127
|
| VCID-e3uc-36mx-mbfv | libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c |
CVE-2020-36330
|
| VCID-ecku-fk4j-s3hr | libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c |
CVE-2020-36331
|
| VCID-edjd-xk1f-gkgg | Multiple vulnerabilities have been discovered in WebP, the worst of which could allow a remote attacker to cause a Denial of Service condition. |
CVE-2016-9085
|
| VCID-hjha-gt3s-s3e3 | libwebp: use of uninitialized value in ReadSymbol() |
CVE-2018-25014
|
| VCID-k4yg-g6p1-kkbz | libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c |
CVE-2020-36329
|
| VCID-ms2y-xj5p-4ud9 | libwebp: out-of-bounds read in WebPMuxCreateInternal() |
CVE-2018-25012
|
| VCID-t16b-mbs7-wfc1 | libwebp: heap-based buffer overflow in PutLE16() |
CVE-2018-25011
|
| VCID-vdzj-kqfy-d3b7 | libwebp: OOB write in BuildHuffmanTable Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page. |
CVE-2023-4863
GHSA-j7hp-h8jx-5ppr |
| VCID-wcer-d6dm-w3ch | libwebp: out-of-bounds read in WebPMuxCreateInternal |
CVE-2018-25009
|
| VCID-y1t9-28vr-euep | In libwebp 0.5.1, there is a double free bug in libwebpmux. |
CVE-2016-9969
PYSEC-2019-256 |
| VCID-yjus-jmfg-tyfv | libwebp: out-of-bounds read in ShiftBytes() |
CVE-2018-25013
|