Webmproject vulnerabilities

Products

• Libwebp 15
• Libvpx 6
• Libwebm 4

Newest

• chromium libvpx, debian linux +1 more Integer overflow in libvpx CVE-2024-5197 Fix available 5.9 MediumJune 3, 2024
• chromium libvpx Heap overflow in libvpx CVE-2023-6349 Fix available 5.7 MediumMay 27, 2024
• webmproject libvpx, debian linux, fedoraproject fedora +1 more +3 more VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding. CVE-2023-44488 Fix available 7.5 HighSeptember 30, 2023
• google chrome, libvpx, apple ipados +9 more +11 more Electron affected by libvpx's heap buffer overflow in vp8 encoding CVE-2023-5217 In KEVPublic exploitFix available EPSS 49.0% 8.8 HighSeptember 28, 2023
• google chrome, libwebp, bandisoft honeyview +10 more +12 more Duplicate Advisory: Bundled libwebp in Pillow vulnerable CVE-2023-4863 In KEVPublic exploitFix available EPSS 100.0% 8.8 HighSeptember 12, 2023
• chromium libwebp Use after free in libwebp CVE-2023-1999 Public exploitFix available 5.3 MediumApril 12, 2023
• google libwebp, debian linux, netapp ontap select deploy administration utility +1 more +3 more A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an... CVE-2020-36332 Fix available 7.5 HighDecember 31, 2020
• google libwebp, apple ipados, iphone os +3 more +5 more A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function... CVE-2020-36331 Fix available 9.1 CriticalDecember 31, 2020
• google libwebp, apple ipados, iphone os +3 more +5 more A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function... CVE-2020-36330 Fix available 9.1 CriticalDecember 31, 2020
• google libwebp, apple ipados, iphone os +3 more +5 more A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread... CVE-2020-36329 Fix available 9.8 CriticalDecember 31, 2020
• google libwebp, apple ipados, iphone os +3 more +5 more A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function... CVE-2020-36328 Fix available 9.8 CriticalDecember 31, 2020
• webmproject libwebp In libwebp 0.5.1, there is a double free bug in libwebpmux. CVE-2016-9969 Fix available 7.5 HighMay 23, 2019
• webmproject libwebm In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster... CVE-2019-9746 7.5 HighMarch 13, 2019
• google libwebp, redhat enterprise linux +1 more A flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function... CVE-2018-25014 Fix available 9.8 CriticalDecember 31, 2018
• google libwebp, redhat enterprise linux +1 more A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function... CVE-2018-25013 Fix available 9.1 CriticalDecember 31, 2018
• google libwebp, redhat enterprise linux +1 more A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function... CVE-2018-25012 Fix available 9.1 CriticalDecember 31, 2018
• google libwebp, redhat enterprise linux +1 more A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow was found in... CVE-2018-25011 Fix available 9.8 CriticalDecember 31, 2018
• google libwebp, redhat enterprise linux +1 more A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function... CVE-2018-25010 Fix available 9.1 CriticalDecember 31, 2018
• google libwebp, redhat enterprise linux +1 more A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function... CVE-2018-25009 Fix available 9.1 CriticalDecember 31, 2018
• webmproject libwebm In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser()... CVE-2018-19212 6.5 MediumNovember 12, 2018
• webmproject libwebm A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was... CVE-2018-6548 9.8 CriticalFebruary 2, 2018
• webmproject libwebm The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does... CVE-2018-6406 Fix available 8.8 HighJanuary 30, 2018
• webmproject libwebp, fedoraproject fedora +1 more Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown... CVE-2016-9085 Fix available 3.3 LowFebruary 3, 2017
• webmproject libvpx VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of... CVE-2012-0823 Fix available 5.0 MediumFebruary 23, 2012
• google chrome, webmproject libvpx, redhat enterprise linux desktop +2 more +4 more WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44,... CVE-2010-4203 Fix available 9.8 CriticalNovember 5, 2010