{"id":"CVE-2018-25014","aliases":["ALSA-2021:4231","CLSA-2023-1696537325","CLSA-2023-1696970233","CLSA-2023-1696970439","CLSA-2026-1776421961","CLSA-2026-1777973188","CLSA-2026-1777974224","DEBIAN-CVE-2018-25014","DLA-2677-1","DSA-4930-1","EUVD-2018-13795","GHSA-rr28-4v9r-6wcq","RHSA-2021:2328","RHSA-2021:4231","RLSA-2021:4231","UBUNTU-CVE-2018-25014","USN-4971-1","USN-4971-2"],"status":"published","title":"A flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function...","description":"A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.0223,"percentile":0.82872,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-908"],"published":"2018-12-31T00:00:00Z","modified":"2026-10-29T11:01:09Z","fixes":[{"ecosystem":"Debian:12","package":"libwebp","fixed_in":["0.6.1-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libwebp","fixed_in":["0.6.1-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libwebp","fixed_in":["0.6.1-2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libwebp","fixed_in":["0.4.0-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libwebp","fixed_in":["0.4.4-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libwebp","fixed_in":["0.6.1-2ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libwebp","fixed_in":["0.6.1-2ubuntu0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"AlmaLinux:8","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebp-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebp5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebpdemux1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebpmux1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"webp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.4","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS:8.5","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-5.el8.tuxcare.els2"}]}],"bundled":3},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.el8.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.el8.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.el8.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:CentOS-Stream:8","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"1.0.0-9.el8.tuxcare.els2"}]}],"bundled":2},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els4"}]}],"bundled":6},{"source":"osv","ecosystem":"Debian:12","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-1+deb9u1"}]}],"versions":["0.5.2-1"],"bundled":10},{"source":"osv","ecosystem":"Debian:10","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2+deb10u1"}]}],"versions":["0.6.1-2"],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt5-qtimageformats-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt5-qtimageformats-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt5-qtimageformats-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt5-qtimageformats-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-5.el8"}]}],"bundled":8},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-4ubuntu0.1~esm1"}]}],"versions":["0.3.0-3","0.4.0-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1ubuntu0.1~esm1"}]}],"versions":["0.4.3-1.3","0.4.3-1.3build1","0.4.4-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.1"}]}],"versions":["0.6.0-3","0.6.0-4","0.6.1-1","0.6.1-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.20.04.1"}]}],"versions":["0.6.1-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.1"}]}],"versions":["0.6.0-3","0.6.0-4","0.6.1-1","0.6.1-2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.20.04.1"}]}],"versions":["0.6.1-2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-4ubuntu0.1~esm1"}]}],"versions":["0.3.0-3","0.4.0-4"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1ubuntu0.1~esm1"}]}],"versions":["0.4.3-1.3","0.4.3-1.3build1","0.4.4-1"],"bundled":10}],"products":[{"vendor":"google","product":"libwebp"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"webmproject","product":"libwebp"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956927","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Third Party Advisory","fix","report"]},{"url":"https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9496","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://chromium.googlesource.com/webm/libwebp/+log/78ad57a36ad69a9c22874b182d49d64125c380f2..907208f97ead639bd52","tags":["x_refsource_MISC","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25014","tags":["advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html"},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html"},{"url":"https://security.netapp.com/advisory/ntap-20211104-0004/"},{"url":"https://support.apple.com/kb/HT212601"},{"url":"https://www.debian.org/security/2021/dsa-4930"},{"url":"http://seclists.org/fulldisclosure/2021/Jul/54"},{"url":"https://github.com/advisories/GHSA-rr28-4v9r-6wcq"},{"url":"https://errata.almalinux.org/8/ALSA-2021-4231.html","tags":["advisory"]},{"url":"https://vulners.com/cve/CVE-2018-25009","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-25010","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-25012","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-25013","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2018-25014","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-36330","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-36331","tags":["report"]},{"url":"https://vulners.com/cve/CVE-2020-36332","tags":["report"]},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1696537325","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.4-els/CLSA-2023-1696970233.html","tags":["advisory"]},{"url":"https://errata.cloudlinux.com/centos8.5-els/CLSA-2023-1696970439.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos-stream8els/CLSA-2026-1776421961.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2026-1777973188.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2026-1777974224.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2018-25014","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2328","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956829","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956919","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2328.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25011","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25011","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25014","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25014","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36328","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36328","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36329","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36329","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:4231","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#moderate","tags":["article"]},{"url":"https://access.redhat.com/documentation/en-us/red_hat_enterprise_linux/8/html/8.5_release_notes/","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956853","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956856","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956868","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956917","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956918","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956922","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956926","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_4231.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25009","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25009","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25009","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25010","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25010","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25010","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25012","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25012","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25012","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25013","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25013","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25013","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36330","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36330","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36330","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36331","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36331","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36331","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36332","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36332","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36332","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:4231","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-25014","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4971-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4971-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-25009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36328","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36332","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2018-25014","description":"A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().","status":"published","published":"2021-05-21T16:27:57Z","modified":"2024-08-05T12:26:39.521Z","cwes":["CWE-908"],"updated_at":"2026-11-02T14:35:02.289647Z"}],"euvd":[{"id":"EUVD-2018-13795","description":"A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().","status":"published","published":"2021-05-21T16:27:57Z","modified":"2024-08-05T12:26:39Z","updated_at":"2026-11-03T02:39:27.400094Z"}],"ghsa":[{"id":"GHSA-rr28-4v9r-6wcq","title":"A flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function...","description":"A flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-05-24T19:02:55Z","modified":"2023-01-27T05:03:55Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:42:20.947965Z"}],"nvd":[{"id":"CVE-2018-25014","description":"A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().","status":"published","published":"2021-05-21T17:15:08.203Z","modified":"2026-06-17T01:54:31.513Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-908"],"updated_at":"2026-11-02T14:05:00.565712Z"}],"osv":[{"id":"CVE-2018-25014","description":"A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().","status":"published","published":"2021-05-21T17:15:08.203Z","modified":"2026-10-24T10:30:20.880919243Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:09.145458Z"},{"id":"DEBIAN-CVE-2018-25014","description":"A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().","status":"published","published":"2021-05-21T17:15:08.203Z","modified":"2026-10-23T18:03:05.775959743Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:30.867575Z"},{"id":"RHSA-2021:2328","title":"Red Hat Security Advisory: qt5-qtimageformats security update","status":"published","published":"2024-09-16T05:55:20Z","modified":"2026-06-26T10:54:44Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:4231","title":"Red Hat Security Advisory: libwebp security update","status":"published","published":"2024-09-16T05:59:17Z","modified":"2026-04-30T10:33:36.215306Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:4231","title":"Moderate: libwebp security update","description":"The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.\n\nSecurity Fix(es):\n\n* libwebp: out-of-bounds read in WebPMuxCreateInternal (CVE-2018-25009)\n\n* libwebp: out-of-bounds read in ApplyFilter() (CVE-2018-25010)\n\n* libwebp: out-of-bounds read in WebPMuxCreateInternal() (CVE-2018-25012)\n\n* libwebp: out-of-bounds read in ShiftBytes() (CVE-2018-25013)\n\n* libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)\n\n* libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c (CVE-2020-36330)\n\n* libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c (CVE-2020-36331)\n\n* libwebp: excessive memory allocation when reading a file (CVE-2020-36332)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the Rocky Linux 8.5 Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:47:24Z","modified":"2026-02-05T04:15:13.860031Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2018-25014","description":"A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().","status":"published","published":"2018-12-31T00:00:00Z","modified":"2026-04-22T11:53:15.540234Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:17.91743Z"},{"id":"ALSA-2021:4231","title":"Moderate: libwebp security update","description":"The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.\n\nSecurity Fix(es):\n\n* libwebp: out-of-bounds read in WebPMuxCreateInternal (CVE-2018-25009)\n\n* libwebp: out-of-bounds read in ApplyFilter() (CVE-2018-25010)\n\n* libwebp: out-of-bounds read in WebPMuxCreateInternal() (CVE-2018-25012)\n\n* libwebp: out-of-bounds read in ShiftBytes() (CVE-2018-25013)\n\n* libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)\n\n* libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c (CVE-2020-36330)\n\n* libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c (CVE-2020-36331)\n\n* libwebp: excessive memory allocation when reading a file (CVE-2020-36332)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.\n\nAdditional Changes:\n\nFor detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.","status":"published","published":"2021-11-09T08:47:24Z","modified":"2026-10-29T11:01:09.405173313Z","updated_at":"2026-11-02T15:27:51.196609Z"},{"id":"CLSA-2023-1696537325","title":"Fix of 10 CVEs","description":"\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25009.patch: add additional check to avoid\n       read over the header\n     - CVE-2018-25009\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25010.patch: limit the filter size to not\n       exceed the image dimensions\n     - CVE-2018-25010\n   * SECURITY UPDATE: fail on multiple image chunks\n     - debian/patches/CVE-2018-25011.patch: only 1 image chunk allowed\n     - CVE-2018-25011\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25013_4.patch: wait for all threads to\n       be done in DecodeRemaining.\n     - CVE-2018-25013\n     - CVE-2018-25014\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2020-36328.patch: fix invalid check for buffer\n       size\n     - CVE-2020-36328\n   * SECURITY UPDATE: a use-after-free was found due to a thread being\n     killed too early\n     - debian/patches/CVE-2020-36329.patch: fix for thread race\n       heap-use-after-free\n     - CVE-2020-36329\n   * SECURITY UPDATE: an out-of-bounds read\n     - debian/patches/CVE-2020-36330.patch: fix riff size checks\n     - CVE-2020-36330\n   * SECURITY UPDATE: an out-of-bounds read\n     - debian/patches/CVE-2020-36331.patch: validate chunk_size\n     - CVE-2020-36331\n   * SECURITY UPDATE: a use after free/double free\n     - debian/patches/CVE-2023-1999.patch: clear result-\u003ebw on error\n     - CVE-2023-1999","status":"published","published":"2023-10-05T20:22:09Z","modified":"2026-06-04T10:03:22.957732Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1696970233","title":"libwebp: Fix of 3 CVEs","description":"- CVE-2018-25013, CVE-2018-25014: wait for all threads to be done in\n  DecodeRemaining\n- CVE-2023-1999: fix a double free error","status":"published","published":"2023-10-10T20:37:18Z","modified":"2026-06-01T00:30:12.355835828Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2023-1696970439","title":"libwebp: Fix of 3 CVEs","description":"- CVE-2018-25013, CVE-2018-25014: wait for all threads to be done in\n  DecodeRemaining\n- CVE-2023-1999: fix a double free error","status":"published","published":"2023-10-10T20:40:43Z","modified":"2026-06-01T00:33:22.094197435Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2026-1776421961","title":"libwebp: Fix of 2 CVEs","description":"- CVE-2018-25013, CVE-2018-25014: wait for all threads to be done in\n  DecodeRemaining, make sure partition #0 is read before VP8 data","status":"published","published":"2026-04-17T10:32:45Z","modified":"2026-06-01T00:33:14.600412685Z","updated_at":"2026-11-02T15:43:44.009773Z"},{"id":"CLSA-2026-1777973188","title":"libwebp: Fix of 6 CVEs","description":"- CVE-2018-25009: fix out-of-bounds read in GetLE16() by validating VP8X\n  chunk size\n- CVE-2018-25010: fix heap-based buffer overflow in ApplyFilter() by\n  limiting filter radius to image dimensions\n- CVE-2018-25011: fix heap-based buffer overflow in PutLE16() by\n  rejecting multiple image chunks in ANMF frames\n- CVE-2018-25012: fix out-of-bounds read in GetLE24() by validating VP8X\n  chunk size\n- CVE-2018-25013: fix heap-based buffer overflow in ShiftBytes() by\n  synchronizing threads in DecodeRemaining\n- CVE-2018-25014: fix use of uninitialized value in ReadSymbol() by\n  validating decoder readiness and synchronizing threads","status":"published","published":"2026-05-05T09:26:34Z","modified":"2026-06-01T00:33:26.061060474Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"CLSA-2026-1777974224","title":"libwebp: Fix of 6 CVEs","description":"- CVE-2018-25009: fix out-of-bounds read in GetLE16() by validating VP8X\n  chunk size\n- CVE-2018-25010: fix heap-based buffer overflow in ApplyFilter() by\n  limiting filter radius to image dimensions\n- CVE-2018-25011: fix heap-based buffer overflow in PutLE16() by\n  rejecting multiple image chunks in ANMF frames\n- CVE-2018-25012: fix out-of-bounds read in GetLE24() by validating VP8X\n  chunk size\n- CVE-2018-25013: fix heap-based buffer overflow in ShiftBytes() by\n  synchronizing threads in DecodeRemaining\n- CVE-2018-25014: fix use of uninitialized value in ReadSymbol() by\n  validating decoder readiness and synchronizing threads","status":"published","published":"2026-05-05T23:41:05Z","modified":"2026-06-01T00:32:44.309141197Z","updated_at":"2026-11-02T15:43:44.737408Z"},{"id":"DLA-2677-1","title":"libwebp - security update","status":"published","published":"2021-06-05T00:00:00Z","modified":"2026-03-09T01:20:09.905035Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4930-1","title":"libwebp - security update","status":"published","published":"2021-06-10T00:00:00Z","modified":"2026-03-09T02:09:42.528795Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"USN-4971-1","title":"libwebp vulnerabilities","description":"It was discovered that libwebp incorrectly handled certain malformed\nimages. If a user or automated system were tricked into opening a specially\ncrafted image file, a remote attacker could use this issue to cause libwebp\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2021-06-01T11:29:35Z","modified":"2026-04-27T16:03:37.683699506Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4971-2","title":"libwebp vulnerabilities","description":"USN-4971-1 fixed several vulnerabilities in libwebp. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that libwebp incorrectly handled certain malformed\n images. If a user or automated system were tricked into opening a specially\n crafted image file, a remote attacker could use this issue to cause libwebp\n to crash, resulting in a denial of service, or possibly execute arbitrary\n code.\n","status":"published","published":"2021-06-10T13:12:37Z","modified":"2026-06-29T13:49:12.454575161Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}