Search for packages
Package details: pkg:conan/libwebp@1.2.4
purl pkg:conan/libwebp@1.2.4
Next non-vulnerable version 1.3.2
Latest non-vulnerable version 1.3.2
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-2svv-d2xq-aaan
Aliases:
CVE-2023-1999
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. 
1.3.1
Affected by 1 other vulnerability.
VCID-5557-vu7d-aaaa
Aliases:
CVE-2023-4863
GHSA-j7hp-h8jx-5ppr
Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
1.3.2
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2025-06-20T16:42:21.487167+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 36.1.3
2025-06-20T16:42:17.235940+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 36.1.3
2025-06-20T16:35:20.402818+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 36.1.3
2025-06-20T16:35:19.956805+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 36.1.3
2025-06-03T23:20:47.514969+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 36.1.0
2025-06-03T23:20:43.668721+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 36.1.0
2025-06-03T23:14:08.493230+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 36.1.0
2025-06-03T23:14:08.104532+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 36.1.0
2025-06-02T23:17:58.553658+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 36.1.2
2025-06-02T23:17:54.462121+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 36.1.2
2025-06-02T23:11:10.025415+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 36.1.2
2025-06-02T23:11:09.609130+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 36.1.2
2025-04-03T21:33:58.021099+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 36.0.0
2025-04-03T21:33:48.680639+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 36.0.0
2025-04-03T21:19:55.583556+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 36.0.0
2025-04-03T21:19:54.350116+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 36.0.0
2025-02-18T01:05:47.259595+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 35.1.0
2025-02-18T01:05:47.156756+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 35.1.0
2025-02-18T00:51:06.773695+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 35.1.0
2025-02-18T00:51:06.719967+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 35.1.0
2024-11-20T23:30:51.126708+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 35.0.0
2024-11-20T23:21:14.545612+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 35.0.0
2024-11-18T23:19:43.345646+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 34.3.2
2024-11-18T23:08:54.392585+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 34.3.2
2024-10-08T00:17:07.608983+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 34.0.2
2024-10-08T00:08:07.537311+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 34.0.2
2024-09-23T00:31:07.720933+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 34.0.1
2024-09-23T00:21:36.633709+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 34.0.1
2024-04-24T02:42:03.728321+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 34.0.0rc4
2024-04-24T02:42:03.572377+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 34.0.0rc4
2024-04-24T02:36:08.998634+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 34.0.0rc4
2024-04-24T02:36:08.905909+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 34.0.0rc4
2024-01-10T05:17:22.661256+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 34.0.0rc2
2024-01-10T05:17:22.518046+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 34.0.0rc2
2024-01-10T05:11:32.778668+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 34.0.0rc2
2024-01-10T05:11:32.687384+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 34.0.0rc2
2024-01-03T22:05:13.699360+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-4863.yml 34.0.0rc1
2024-01-03T22:05:13.542454+00:00 GitLab Importer Affected by VCID-5557-vu7d-aaaa None 34.0.0rc1
2024-01-03T21:59:17.679273+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan https://gitlab.com/gitlab-org/advisories-community/-/blob/main/conan/libwebp/CVE-2023-1999.yml 34.0.0rc1
2024-01-03T21:59:17.586374+00:00 GitLab Importer Affected by VCID-2svv-d2xq-aaan None 34.0.0rc1