Non notée
CVE-2020-36329 A flaw was found in libwebp in versions before 1.0.1
Description
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| libwebp | Versions non publiées |
Références
- bugzilla.redhat.com bugzilla.redhat.com
- [debian-lts-announce] 20210605 [SECURITY] [DLA 2672-1] libwebp security update lists.debian.org
- [debian-lts-announce] 20210606 [SECURITY] [DLA 2677-1] libwebp security update lists.debian.org
- DSA-4930 www.debian.org
- support.apple.com support.apple.com
- 20210723 APPLE-SA-2021-07-21-1 iOS 14.7 and iPadOS 14.7 seclists.org
- security.netapp.com security.netapp.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de libwebp
Les 11 CVE de libwebp →
CVE-2018-25014
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()
Non notée
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes()
Non notée
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24()
Non notée
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()
Non notée