CVE-2023-4863

< 1.3.2

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an

8.8HIGH

CVE-2023-1999

>= 0.4.2 and < 1.3.1

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through t

5.3MEDIUM

CVE-2020-36332

< 1.0.1

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The hig

7.5HIGH

CVE-2020-36331

< 1.0.1

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest thr

9.1CRITICAL

CVE-2020-36330

< 1.0.1

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highes

9.1CRITICAL

CVE-2020-36329

< 1.0.1

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highe

9.8CRITICAL

CVE-2020-36328

< 1.0.1

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due t

9.8CRITICAL

CVE-2018-25014

< 1.0.1

A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().

9.8CRITICAL

CVE-2018-25013

< 1.0.1

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

9.1CRITICAL

CVE-2018-25012

< 1.0.1

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

9.1CRITICAL

CVE-2018-25011

< 1.0.1

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().

9.8CRITICAL

CVE-2018-25010

< 1.0.1

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

9.1CRITICAL

CVE-2018-25009

< 1.0.1

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

9.1CRITICAL

CVE-2016-9969

all versions

In libwebp 0.5.1, there is a double free bug in libwebpmux.

7.5HIGH

CVE-2016-9085

<= 0.5.2

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

3.3LOW