CVE-2016-9085: webmproject libwebp – CVSS 3.3 · Watchpost

← All vulnerabilities

CVE-2016-9085

BAIXO 3.3CVE-2016-9085 · Published 03/02/2017 · updated 17/06/2026

Em resumo

CVE-2016-9085 é uma vulnerabilidade BAIXO (CVSS 3.3) que afeta libwebp (webmproject).
Chance de exploração nos próximos 30 dias (EPSS): 0.43%, maior que 36.8% das vulnerabilidades.
Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.

Package	Affected versions	Patched versions
libwebp webmproject	`≤ 0.5.2`	No fix yet

Description

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

References

openwall.com/lists/oss-security/2016/10/27/3 · Mailing List
securityfocus.com/bid/93928 · Third Party Advisory
bugzilla.redhat.com/show_bug.cgi · Issue Tracking
chromium.googlesource.com/webm/libwebp/+/e2affacc35f1df6cc3b1a9fa0ceff5ce2d0cce83 · Issue Tracking
lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LG5Q42J7EJDKQKWTTHCO4YZMOMP74YPQ
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTR2ZW67TMT7KC24RBENIF25KWUJ7VPD
lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SH6X3MWD5AHZC5JT4625PGFHAYLR7YW7
security.gentoo.org/glsa/201701-61 · Third Party Advisory

Mais vulnerabilidades de libwebp

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free