CVE-2018-25014

Description

References

• bugs.chromium.org/p/oss-fuzz/issues/detail · Third Party Advisory
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• chromium.googlesource.com/webm/libwebp/+log/78ad57a36ad69a9c22874b182d49d64125c380f2..907208f97ead639bd52 · Third Party Advisory

Autres vulnérabilités de libwebp

• CVE-2023-4863ÉLEVÉE 8.8EXPLOITED (CISA KEV)Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bo…
• CVE-2023-1999ÉLEVÉE 7.5There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best…
• CVE-2020-36332ÉLEVÉE 7.5A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threa…
• CVE-2020-36331CRITIQUE 9.1A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from t…
• CVE-2020-36330CRITIQUE 9.1A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat f…