Not rated
CVE-2020-36330 A flaw was found in libwebp in versions before 1.0.1
Description
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libwebp | Versions not published |
Other CVEs of libwebp
The 11 CVEs of libwebp →
CVE-2018-25014
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()
Not rated
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes()
Not rated
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24()
Not rated
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()
Not rated