Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2020-36328

Опубликовано: 21 мая 2021
Источник: nvd
CVSS3: 9.8
CVSS2: 7.5
EPSS Низкий

Описание

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Ссылки

Уязвимые конфигурации

Конфигурация 1
cpe:2.3:a:webmproject:libwebp:*:*:*:*:*:*:*:*
Версия до 1.0.1 (исключая)
Конфигурация 2

Одно из

cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:*
cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:*
Конфигурация 3
cpe:2.3:a:netapp:ontap_select_deploy_administration_utility:-:*:*:*:*:*:*:*
Конфигурация 4

Одно из

cpe:2.3:o:debian:debian_linux:9.0:*:*:*:*:*:*:*
cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
Конфигурация 5

Одно из

cpe:2.3:o:apple:ipados:14.7:*:*:*:*:*:*:*
cpe:2.3:o:apple:iphone_os:14.7:*:*:*:*:*:*:*

EPSS

Процентиль: 68%
0.00601
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787
CWE-787

Связанные уязвимости

ubuntu логотип

CVE-2020-36328

CVSS3: 9.8
ubuntu
около 4 лет назад

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

redhat логотип

CVE-2020-36328

CVSS3: 9.8
redhat
больше 5 лет назад

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

msrc логотип

CVE-2020-36328

CVSS3: 9.8
msrc
около 4 лет назад

Описание отсутствует

debian логотип

CVE-2020-36328

CVSS3: 9.8
debian
около 4 лет назад

A flaw was found in libwebp in versions before 1.0.1. A heap-based buf ...

github логотип

GHSA-jxwm-333p-5cwx

CVSS3: 9.8
github
около 3 лет назад

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

EPSS

Процентиль: 68%
0.00601
Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-787
CWE-787