CVE-2020-36329

概要

参考情報

• seclists.org/fulldisclosure/2021/Jul/54 · Mailing List
• bugzilla.redhat.com/show_bug.cgi · Issue Tracking
• lists.debian.org/debian-lts-announce/2021/06/msg00005.html · Mailing List
• lists.debian.org/debian-lts-announce/2021/06/msg00006.html · Mailing List
• security.netapp.com/advisory/ntap-20211112-0001 · Third Party Advisory
• support.apple.com/kb/HT212601 · Third Party Advisory
• debian.org/security/2021/dsa-4930 · Third Party Advisory

libwebp のその他の脆弱性

• CVE-2023-4863高 8.8悪用確認済み（CISA KEV）Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bo…
• CVE-2023-1999高 7.5There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best…
• CVE-2020-36332高 7.5A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threa…
• CVE-2020-36331緊急 9.1A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from t…
• CVE-2020-36330緊急 9.1A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat f…