Описание
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
Пакеты
| Пакет | Статус | Версия исправления | Релиз | Тип |
|---|---|---|---|---|
| libwebp | fixed | 0.6.1-2.1 | package |
Примечания
https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9119
EPSS
Процентиль: 58%
0.00376
Низкий
Связанные уязвимости
CVSS3: 9.8
ubuntu
около 4 лет назад
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
CVSS3: 9.8
redhat
почти 7 лет назад
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
CVSS3: 9.8
nvd
около 4 лет назад
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
CVSS3: 9.8
github
около 3 лет назад
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow was found in PutLE16(). The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
EPSS
Процентиль: 58%
0.00376
Низкий