Not rated
CVE-2020-36332 A flaw was found in libwebp in versions before 1.0.1
Description
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libwebp | Versions not published |
References
- bugzilla.redhat.com bugzilla.redhat.com
- DSA-4930 www.debian.org
- security.netapp.com security.netapp.com
Timeline
- Published
- Last modified
Other CVEs of libwebp
The 11 CVEs of libwebp →
CVE-2018-25014
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()
Not rated
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes()
Not rated
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24()
Not rated
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()
Not rated