Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2018-25012

Опубликовано: 21 мая 2021
Источник: nvd
CVSS3: 9.1
CVSS2: 6.4
EPSS Низкий

Описание

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:webmproject:libwebp:*:*:*:*:*:*:*:*
Версия до 1.0.1 (исключая)
Конфигурация 2
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.00575
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125
CWE-125

Связанные уязвимости

ubuntu логотип

CVE-2018-25012

CVSS3: 9.1
ubuntu
больше 4 лет назад

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

redhat логотип

CVE-2018-25012

CVSS3: 9.1
redhat
больше 7 лет назад

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

msrc логотип

CVE-2018-25012

CVSS3: 9.1
msrc
больше 4 лет назад

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

debian логотип

CVE-2018-25012

CVSS3: 9.1
debian
больше 4 лет назад

A heap-based buffer overflow was found in libwebp in versions before 1 ...

github логотип

GHSA-x5pq-pm4r-vx73

CVSS3: 9.1
github
больше 3 лет назад

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function WebPMuxCreateInternal. The highest threat from this vulnerability is to data confidentiality and to the service availability.

EPSS

Процентиль: 68%
0.00575
Низкий

9.1 Critical

CVSS3

6.4 Medium

CVSS2

Дефекты

CWE-125
CWE-125