Поиск уязвимостей
Количество 68
Количество 68
ALT-PU-2023-7312
ALT-PU-2023-7312: package `libwebp` update to version 1.3.2-alt1
CVE-2023-1999
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
CVE-2023-1999
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
CVE-2023-1999
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
CVE-2023-1999
Chromium: CVE-2023-1999 Use after free in libwebp
CVE-2023-1999
There exists a use after free/double free in libwebp. An attacker can ...
CVE-2023-4863
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-4863
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-4863
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVE-2023-4863
Chromium: CVE-2023-4863 Heap buffer overflow in WebP
CVE-2023-4863
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.1 ...
SUSE-SU-2023:2552-1
Security update for libwebp
SUSE-SU-2023:2490-1
Security update for libwebp
SUSE-SU-2023:2467-1
Security update for libwebp
RLSA-2023:2078
Important: libwebp security update
RLSA-2023:2076
Important: libwebp security update
GHSA-8x9p-cw2c-6253
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
ELSA-2023-2078
ELSA-2023-2078: libwebp security update (IMPORTANT)
ELSA-2023-2077
ELSA-2023-2077: libwebp security update (IMPORTANT)
ELSA-2023-2076
ELSA-2023-2076: libwebp security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
| ALT-PU-2023-7312 ALT-PU-2023-7312: package `libwebp` update to version 1.3.2-alt1 | CVSS3: 8.8 | почти 3 года назад | |
 | CVE-2023-1999 There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-1999 There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-1999 There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-1999 Chromium: CVE-2023-1999 Use after free in libwebp | 1% Низкий | около 3 лет назад | |
| CVE-2023-1999 There exists a use after free/double free in libwebp. An attacker can ... | CVSS3: 7.5 | 1% Низкий | больше 3 лет назад |
| CVE-2023-4863 Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) | CVSS3: 8.8 | 100% Критический | около 3 лет назад |
| CVE-2023-4863 Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) | CVSS3: 9.6 | 100% Критический | около 3 лет назад |
| CVE-2023-4863 Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) | CVSS3: 8.8 | 100% Критический | около 3 лет назад |
| CVE-2023-4863 Chromium: CVE-2023-4863 Heap buffer overflow in WebP | 100% Критический | около 3 лет назад | |
| CVE-2023-4863 Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.1 ... | CVSS3: 8.8 | 100% Критический | около 3 лет назад |
 | SUSE-SU-2023:2552-1 Security update for libwebp | 1% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:2490-1 Security update for libwebp | 1% Низкий | больше 3 лет назад | |
| SUSE-SU-2023:2467-1 Security update for libwebp | 1% Низкий | больше 3 лет назад | |
 | RLSA-2023:2078 Important: libwebp security update | 1% Низкий | больше 3 лет назад | |
| RLSA-2023:2076 Important: libwebp security update | 1% Низкий | больше 3 лет назад | |
| GHSA-8x9p-cw2c-6253 There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free. | CVSS3: 5.3 | 1% Низкий | больше 3 лет назад |
| ELSA-2023-2078 ELSA-2023-2078: libwebp security update (IMPORTANT) | 1% Низкий | больше 3 лет назад | |
| ELSA-2023-2077 ELSA-2023-2077: libwebp security update (IMPORTANT) | 1% Низкий | больше 3 лет назад | |
| ELSA-2023-2076 ELSA-2023-2076: libwebp security update (IMPORTANT) | 1% Низкий | больше 3 лет назад |
Уязвимостей на страницу