{"id":"CVE-2020-36328","aliases":["CLSA-2023-1696537325","CLSA-2025-1758615308","CLSA-2025-1758645375","DEBIAN-CVE-2020-36328","DLA-2677-1","DSA-4930-1","EUVD-2020-23865","GHSA-jxwm-333p-5cwx","RHSA-2021:2260","RHSA-2021:2328","RHSA-2021:2354","RHSA-2021:2364","RHSA-2021:2365","RLSA-2021:2354","SUSE-SU-2021:1860-1","UBUNTU-CVE-2020-36328","USN-4971-1","USN-4971-2","openSUSE-SU-2021:1860-1"],"status":"published","title":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function...","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-10","score":0.02662,"percentile":0.85834,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-119","CWE-787"],"published":"2020-12-31T00:00:00Z","modified":"2026-10-26T12:02:32Z","fixes":[{"ecosystem":"TuxCare:OracleLinux:6","package":"libwebp","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-devel","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-java","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-tools","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libwebp","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libwebp-devel","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libwebp-java","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"TuxCare:CentOS:6","package":"libwebp-tools","fixed_in":["0.4.3-3.el6.tuxcare.els2"],"sources":["osv"]},{"ecosystem":"Debian:12","package":"libwebp","fixed_in":["0.6.1-2.1"],"sources":["osv"]},{"ecosystem":"Debian:13","package":"libwebp","fixed_in":["0.6.1-2.1"],"sources":["osv"]},{"ecosystem":"Debian:14","package":"libwebp","fixed_in":["0.6.1-2.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libwebp","fixed_in":["0.4.0-4ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libwebp","fixed_in":["0.4.4-1ubuntu0.1~esm1"],"sources":["osv"]},{"ecosystem":"Ubuntu:18.04:LTS","package":"libwebp","fixed_in":["0.6.1-2ubuntu0.18.04.1"],"sources":["osv"]},{"ecosystem":"Ubuntu:20.04:LTS","package":"libwebp","fixed_in":["0.6.1-2ubuntu0.20.04.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebp-dev","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebp5","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebpdemux1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"libwebpmux1","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:Ubuntu:16.04","package":"webp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1+tuxcare.els1"}]}],"bundled":10},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:OracleLinux:6","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"TuxCare:CentOS:6","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.3-3.el6.tuxcare.els2"}]}]},{"source":"osv","ecosystem":"Debian:12","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:13","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:14","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2.1"}]}]},{"source":"osv","ecosystem":"Debian:9","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.2-1+deb9u1"}]}],"versions":["0.5.2-1"],"bundled":10},{"source":"osv","ecosystem":"Debian:10","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2+deb10u1"}]}],"versions":["0.6.1-2"],"bundled":11},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::client","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::computenode","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwebp-java","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"libwebp-tools","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:0.3.0-10.el7_9"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt5-qtimageformats-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::server","package":"qt5-qtimageformats-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt5-qtimageformats","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt5-qtimageformats-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:7::workstation","package":"qt5-qtimageformats-doc","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:5.9.7-2.el7_9"}]}],"bundled":4},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:enterprise_linux:8::appstream","package":"libwebp-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwebp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwebp-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.2::appstream","package":"libwebp-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_2"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwebp-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwebp-debugsource","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwebp-devel","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwebp-java-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Red Hat:rhel_eus:8.1::appstream","package":"libwebp-tools-debuginfo","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-4.el8_1"}]}],"bundled":3},{"source":"osv","ecosystem":"Rocky Linux:8","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0:1.0.0-3.el8_4"}]}],"bundled":3},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP2","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Module for Package Hub 15 SP3","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-ESPOS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15-LTSS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-ESPOS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15-LTSS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-BCL","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server 15 SP1-LTSS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Server for SAP Applications 15 SP1","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Proxy 4.0","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Retail Branch Server 4.0","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Manager Server 4.0","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP2","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Linux Enterprise Workstation Extension 15 SP3","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"SUSE:Enterprise Storage 6","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-4ubuntu0.1~esm1"}]}],"versions":["0.3.0-3","0.4.0-4"]},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1ubuntu0.1~esm1"}]}],"versions":["0.4.3-1.3","0.4.3-1.3build1","0.4.4-1"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.1"}]}],"versions":["0.6.0-3","0.6.0-4","0.6.1-1","0.6.1-2"]},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.20.04.1"}]}],"versions":["0.6.1-2"]},{"source":"osv","ecosystem":"Ubuntu:18.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.18.04.1"}]}],"versions":["0.6.0-3","0.6.0-4","0.6.1-1","0.6.1-2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:20.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.6.1-2ubuntu0.20.04.1"}]}],"versions":["0.6.1-2"],"bundled":11},{"source":"osv","ecosystem":"Ubuntu:Pro:14.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.0-4ubuntu0.1~esm1"}]}],"versions":["0.3.0-3","0.4.0-4"],"bundled":10},{"source":"osv","ecosystem":"Ubuntu:Pro:16.04:LTS","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.4-1ubuntu0.1~esm1"}]}],"versions":["0.4.3-1.3","0.4.3-1.3build1","0.4.4-1"],"bundled":10},{"source":"osv","ecosystem":"openSUSE:Leap 15.3","package":"libwebp","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.5.0-3.5.1"}]}],"bundled":10}],"products":[{"vendor":"apple","product":"ipados"},{"vendor":"apple","product":"iphone_os"},{"vendor":"debian","product":"debian_linux"},{"vendor":"google","product":"libwebp"},{"vendor":"netapp","product":"ontap_select_deploy_administration_utility"},{"vendor":"redhat","product":"enterprise_linux"},{"vendor":"webmproject","product":"libwebp"}],"references":[{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956829","tags":["x_refsource_MISC","x_transferred","Issue Tracking","Patch","Release Notes","Third Party Advisory","fix","report"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html","tags":["mailing-list","x_refsource_MLIST","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://www.debian.org/security/2021/dsa-4930","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred","Third Party Advisory","advisory"]},{"url":"https://support.apple.com/kb/HT212601","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"http://seclists.org/fulldisclosure/2021/Jul/54","tags":["mailing-list","x_refsource_FULLDISC","x_transferred","Mailing List","Third Party Advisory","advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20211112-0001/","tags":["x_refsource_CONFIRM","x_transferred","Third Party Advisory","advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36328","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-jxwm-333p-5cwx"},{"url":"https://errata.cloudlinux.com/ubuntu16_04-els/CLSA-2023-1696537325","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/oraclelinux6els/CLSA-2025-1758615308.html","tags":["advisory"]},{"url":"https://errata.tuxcare.com/els_os/centos6els/CLSA-2025-1758645375.html","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2020-36328","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2260","tags":["advisory"]},{"url":"https://access.redhat.com/security/updates/classification/#important","tags":["article"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956843","tags":["report"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956919","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2260.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25011","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25011","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25011","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36328","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36328","tags":["advisory","report"]},{"url":"https://access.redhat.com/security/cve/CVE-2020-36329","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2020-36329","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2020-36329","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2328","tags":["advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=1956927","tags":["report"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2328.json","tags":["advisory"]},{"url":"https://access.redhat.com/security/cve/CVE-2018-25014","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2018-25014","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2018-25014","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2354","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2354.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2364","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2364.json","tags":["advisory"]},{"url":"https://access.redhat.com/errata/RHSA-2021:2365","tags":["advisory"]},{"url":"https://security.access.redhat.com/data/csaf/v2/advisories/2021/rhsa-2021_2365.json","tags":["advisory"]},{"url":"https://errata.rockylinux.org/RLSA-2021:2354","tags":["advisory"]},{"url":"https://www.suse.com/support/update/announcement/2021/suse-su-20211860-1/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1185652","tags":["report"]},{"url":"https://bugzilla.suse.com/1185654","tags":["report"]},{"url":"https://bugzilla.suse.com/1185673","tags":["report"]},{"url":"https://bugzilla.suse.com/1185674","tags":["report"]},{"url":"https://bugzilla.suse.com/1185685","tags":["report"]},{"url":"https://bugzilla.suse.com/1185686","tags":["report"]},{"url":"https://bugzilla.suse.com/1185688","tags":["report"]},{"url":"https://bugzilla.suse.com/1185690","tags":["report"]},{"url":"https://bugzilla.suse.com/1185691","tags":["report"]},{"url":"https://bugzilla.suse.com/1186247","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25009","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25010","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25011","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25012","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2018-25013","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36328","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36329","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36330","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36331","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2020-36332","tags":["web"]},{"url":"https://ubuntu.com/security/CVE-2020-36328","tags":["report"]},{"url":"https://ubuntu.com/security/notices/USN-4971-1","tags":["advisory"]},{"url":"https://ubuntu.com/security/notices/USN-4971-2","tags":["advisory"]},{"url":"https://ubuntu.com/security/CVE-2018-25009","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25010","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25011","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25012","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25013","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2018-25014","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36329","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36330","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36331","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2020-36332","tags":["report"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/4ZIJ3ZK5FGNGJN6E65XZKMQPSQ3RKNVG/","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2020-36328","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-05-21T16:14:21Z","modified":"2024-08-04T17:23:10.457Z","cwes":["CWE-787"],"updated_at":"2026-11-02T14:35:54.80237Z"}],"euvd":[{"id":"EUVD-2020-23865","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-05-21T16:14:21Z","modified":"2024-08-04T17:23:10Z","updated_at":"2026-11-03T03:07:03.484914Z"}],"ghsa":[{"id":"GHSA-jxwm-333p-5cwx","title":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function...","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2022-05-24T19:02:55Z","modified":"2023-02-02T05:01:15Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-119","CWE-787"],"updated_at":"2026-11-02T14:51:08.679679Z"}],"nvd":[{"id":"CVE-2020-36328","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-05-21T17:15:08.27Z","modified":"2026-06-17T03:15:19.177Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-787"],"updated_at":"2026-11-02T14:06:39.25999Z"}],"osv":[{"id":"CVE-2020-36328","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-05-21T17:15:08.27Z","modified":"2026-10-24T10:30:22.632969485Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:44:16.936975Z"},{"id":"DEBIAN-CVE-2020-36328","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2021-05-21T17:15:08.27Z","modified":"2026-10-26T12:02:32.11895821Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:45:34.019707Z"},{"id":"RHSA-2021:2260","title":"Red Hat Security Advisory: libwebp security update","status":"published","published":"2024-09-16T05:54:26Z","modified":"2026-06-26T12:22:28.338279152Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2328","title":"Red Hat Security Advisory: qt5-qtimageformats security update","status":"published","published":"2024-09-16T05:55:20Z","modified":"2026-06-26T10:54:44Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2354","title":"Red Hat Security Advisory: libwebp security update","status":"published","published":"2024-09-16T05:54:40Z","modified":"2025-11-22T12:21:42Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2364","title":"Red Hat Security Advisory: libwebp security update","status":"published","published":"2024-09-16T05:54:47Z","modified":"2025-11-22T12:21:48Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RHSA-2021:2365","title":"Red Hat Security Advisory: libwebp security update","status":"published","published":"2024-09-16T05:54:54Z","modified":"2025-11-22T12:21:49Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:08.619234Z"},{"id":"RLSA-2021:2354","title":"Important: libwebp security update","description":"The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.\n\nSecurity Fix(es):\n\n* libwebp: heap-based buffer overflow in PutLE16() (CVE-2018-25011)\n\n* libwebp: heap-based buffer overflow in WebPDecode*Into functions (CVE-2020-36328)\n\n* libwebp: use-after-free in EmitFancyRGB() in dec/io_dec.c (CVE-2020-36329)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.","status":"published","published":"2021-06-08T23:31:29Z","modified":"2026-02-04T23:45:05.404454Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:53:23.969672Z"},{"id":"UBUNTU-CVE-2020-36328","description":"A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.","status":"published","published":"2020-12-31T00:00:00Z","modified":"2026-04-22T12:41:44.886674Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:54:25.179924Z"},{"id":"CLSA-2023-1696537325","title":"Fix of 10 CVEs","description":"\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25009.patch: add additional check to avoid\n       read over the header\n     - CVE-2018-25009\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25010.patch: limit the filter size to not\n       exceed the image dimensions\n     - CVE-2018-25010\n   * SECURITY UPDATE: fail on multiple image chunks\n     - debian/patches/CVE-2018-25011.patch: only 1 image chunk allowed\n     - CVE-2018-25011\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2018-25013_4.patch: wait for all threads to\n       be done in DecodeRemaining.\n     - CVE-2018-25013\n     - CVE-2018-25014\n   * SECURITY UPDATE: a heap-based buffer overflow\n     - debian/patches/CVE-2020-36328.patch: fix invalid check for buffer\n       size\n     - CVE-2020-36328\n   * SECURITY UPDATE: a use-after-free was found due to a thread being\n     killed too early\n     - debian/patches/CVE-2020-36329.patch: fix for thread race\n       heap-use-after-free\n     - CVE-2020-36329\n   * SECURITY UPDATE: an out-of-bounds read\n     - debian/patches/CVE-2020-36330.patch: fix riff size checks\n     - CVE-2020-36330\n   * SECURITY UPDATE: an out-of-bounds read\n     - debian/patches/CVE-2020-36331.patch: validate chunk_size\n     - CVE-2020-36331\n   * SECURITY UPDATE: a use after free/double free\n     - debian/patches/CVE-2023-1999.patch: clear result-\u003ebw on error\n     - CVE-2023-1999","status":"published","published":"2023-10-05T20:22:09Z","modified":"2026-06-04T10:03:22.957732Z","updated_at":"2026-11-02T15:43:40.509998Z"},{"id":"CLSA-2025-1758615308","title":"libwebp: Fix of CVE-2020-36328","description":"- CVE-2020-36328: fix a heap-based buffer overflow in WebPDecode*Into functions","status":"published","published":"2025-09-23T08:15:12Z","modified":"2026-06-01T00:33:25.935749144Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"CLSA-2025-1758645375","title":"libwebp: Fix of CVE-2020-36328","description":"- CVE-2020-36328: fix a heap-based buffer overflow in WebPDecode*Into functions","status":"published","published":"2025-09-23T16:36:19Z","modified":"2026-06-01T00:33:16.481967566Z","updated_at":"2026-11-02T15:43:42.427288Z"},{"id":"DLA-2677-1","title":"libwebp - security update","status":"published","published":"2021-06-05T00:00:00Z","modified":"2026-03-09T01:20:09.905035Z","updated_at":"2026-11-02T15:46:10.712745Z"},{"id":"DSA-4930-1","title":"libwebp - security update","status":"published","published":"2021-06-10T00:00:00Z","modified":"2026-03-09T02:09:42.528795Z","updated_at":"2026-11-02T15:46:17.19998Z"},{"id":"openSUSE-SU-2021:1860-1","title":"Security update for libwebp","description":"This update for libwebp fixes the following issues:\n\n- CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685).\n- CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691).\n- CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674).\n- CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652).\n- CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690).\n- CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688).\n- CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654).\n- CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686).\n- CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673).\n- CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247).\n","status":"published","published":"2021-07-10T18:55:42Z","modified":"2026-02-04T03:04:29.780596Z","updated_at":"2026-11-02T16:58:32.266854Z"},{"id":"SUSE-SU-2021:1860-1","title":"Security update for libwebp","description":"This update for libwebp fixes the following issues:\n\n- CVE-2018-25010: Fixed heap-based buffer overflow in ApplyFilter() (bsc#1185685).\n- CVE-2020-36330: Fixed heap-based buffer overflow in ChunkVerifyAndAssign() (bsc#1185691).\n- CVE-2020-36332: Fixed extreme memory allocation when reading a file (bsc#1185674).\n- CVE-2020-36329: Fixed use-after-free in EmitFancyRGB() (bsc#1185652).\n- CVE-2018-25012: Fixed heap-based buffer overflow in GetLE24() (bsc#1185690).\n- CVE-2020-36328: Fixed heap-based buffer overflow in WebPDecode*Into functions (bsc#1185688).\n- CVE-2018-25013: Fixed heap-based buffer overflow in ShiftBytes() (bsc#1185654).\n- CVE-2020-36331: Fixed heap-based buffer overflow in ChunkAssignData() (bsc#1185686).\n- CVE-2018-25009: Fixed heap-based buffer overflow in GetLE16() (bsc#1185673).\n- CVE-2018-25011: Fixed fail on multiple image chunks (bsc#1186247).\n","status":"published","published":"2021-06-04T07:04:48Z","modified":"2026-02-04T03:09:44.729813Z","updated_at":"2026-11-02T15:53:49.138643Z"},{"id":"USN-4971-1","title":"libwebp vulnerabilities","description":"It was discovered that libwebp incorrectly handled certain malformed\nimages. If a user or automated system were tricked into opening a specially\ncrafted image file, a remote attacker could use this issue to cause libwebp\nto crash, resulting in a denial of service, or possibly execute arbitrary\ncode.\n","status":"published","published":"2021-06-01T11:29:35Z","modified":"2026-04-27T16:03:37.683699506Z","updated_at":"2026-11-02T16:58:15.159055Z"},{"id":"USN-4971-2","title":"libwebp vulnerabilities","description":"USN-4971-1 fixed several vulnerabilities in libwebp. This update provides\nthe corresponding update for Ubuntu 14.04 ESM and Ubuntu 16.04 ESM.\n\nOriginal advisory details:\n\n It was discovered that libwebp incorrectly handled certain malformed\n images. If a user or automated system were tricked into opening a specially\n crafted image file, a remote attacker could use this issue to cause libwebp\n to crash, resulting in a denial of service, or possibly execute arbitrary\n code.\n","status":"published","published":"2021-06-10T13:12:37Z","modified":"2026-06-29T13:49:12.454575161Z","updated_at":"2026-11-02T16:58:15.159055Z"}]}}