Where
-Infinity
0

Trending

Last week
Last month
Last year

Versions

0.4.2
1
0.5.1
1

ubuntu/firefoxUse after free in libwebp

Risk 46
Severity
7.5
Double Free, Use After Free
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A double-free in libwebp could have led to memory corruption and a potentially exploitable crash.

1 / 6
Source: Mozilla
First published (updated )
CVE-2023-1999

debian/libwebpBuffer Overflow

Risk 66
Severity
9.1
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().

1 / 2
First published (updated )
CVE-2018-25013

redhat/libwebpBuffer Overflow

Risk 66
Severity
9.1
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

1 / 2
Source: MITRE
First published (updated )
CVE-2018-25012

debian/libwebpBuffer Overflow

Risk 66
Severity
9.1
Buffer Overflow
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

1 / 2
First published (updated )
CVE-2018-25009

debian/libwebpInput Validation

Risk 45
Severity
7.5
Input Validation
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

A flaw was found in libwebp in versions before 1.0.1 in the way it read the contents of a file without limiting memory allocation.

Reference: https://bugs.chromium.org/p/webp/issues/detail?id=391

1 / 2
Source: Red Hat
First published (updated )
CVE-2020-36332
Free Weekly Intel

Don't miss critical vulnerabilities

Join thousands of security professionals who receive our weekly digest of trending CVEs, zero-days, and exploited vulnerabilities.

No spam. Unsubscribe anytime.

webmproject LibwebpDouble Free

Risk 69
Severity
7.5
Double Free
CVSS:3.0/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

In libwebp 0.5.1, there is a double free bug in libwebpmux.

First published (updated )
CVE-2016-9969

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203