Not rated
CVE-2020-36330 A flaw was found in libwebp in versions before 1.0.1
Description
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libwebp | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- [debian-lts-announce] 20210605 [SECURITY] [DLA 2672-1] libwebp security update lists.debian.org
- [debian-lts-announce] 20210606 [SECURITY] [DLA 2677-1] libwebp security update lists.debian.org
- DSA-4930 www.debian.org
- support.apple.com support.apple.com
- 20210723 APPLE-SA-2021-07-21-1 iOS 14.7 and iPadOS 14.7 seclists.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of libwebp
The 11 CVEs of libwebp →
CVE-2018-25014
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()
Not rated
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes()
Not rated
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24()
Not rated
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()
Not rated