Not rated
CVE-2020-36329 A flaw was found in libwebp in versions before 1.0.1
Description
A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| libwebp | Versions not published |
Other CVEs of libwebp
The 11 CVEs of libwebp →
CVE-2018-25014
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol()
Not rated
CVE-2018-25013
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes()
Not rated
CVE-2018-25012
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24()
Not rated
CVE-2018-25011
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16()
Not rated