https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-02T22:26:23.401587+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2021:4231 ALSA-2021:4231 — Moderate: libwebp security update 2026-10-02T22:26:23.417104+00:00

Affected: AlmaLinux:8: libwebp, AlmaLinux:8: libwebp-devel

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: out-of-bounds read in WebPMuxCreateInternal (CVE-2018-25009)

* libwebp: out-of-bounds read in ApplyFilter() (CVE-2018-25010)

* libwebp: out-of-bounds read in WebPMuxCreateInternal() (CVE-2018-25012)

* libwebp: out-of-bounds read in ShiftBytes() (CVE-2018-25013)

* libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)

* libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c (CVE-2020-36330)

* libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c (CVE-2020-36331)

* libwebp: excessive memory allocation when reading a file (CVE-2020-36332)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

 https://cve.radiocsirt.org/vuln/bdu:2021-03098 bdu:2021-03098 2026-10-02T22:26:23.417178+00:00 bdu:2021-03098 https://cve.radiocsirt.org/vuln/certfr-2021-avi-562 certfr-2021-avi-562 — De multiples vulnérabilités ont été découvertes dans les produits Apple. Certaines d'entre elles permettent à un attaqu… 2026-10-02T22:26:23.417196+00:00 certfr-2021-avi-562 https://cve.radiocsirt.org/vuln/cnvd-2021-37656 cnvd-2021-37656 2026-10-02T22:26:23.417212+00:00 cnvd-2021-37656 https://cve.radiocsirt.org/vuln/euvd-2026-70918 EUVD-2026-70918 2026-10-02T22:26:23.417224+00:00 EUVD-2026-70918 https://cve.radiocsirt.org/vuln/fkie_cve-2018-25010 fkie_cve-2018-25010 2026-10-02T22:26:23.417234+00:00

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

 https://cve.radiocsirt.org/vuln/ghsa-g4fc-9486-f3m2 GHSA-g4fc-9486-f3m2 2026-10-02T22:26:23.417253+00:00

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ApplyFilter. The highest threat from this vulnerability is to data confidentiality and to the service availability.

 https://cve.radiocsirt.org/vuln/gsd-2018-25010 gsd-2018-25010 2026-10-02T22:26:23.417267+00:00 gsd-2018-25010 https://cve.radiocsirt.org/vuln/msrc_cve-2018-25010 msrc_CVE-2018-25010 — A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter(). 2026-10-02T22:26:23.417277+00:00 msrc_CVE-2018-25010 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1860-1 openSUSE-SU-2021:1860-1 — Security update for libwebp 2026-10-02T22:26:23.417293+00:00

Security update for libwebp

 https://cve.radiocsirt.org/vuln/suse-su-2021:1830-1 SUSE-SU-2021:1830-1 — Security update for libwebp 2026-10-02T22:26:23.417312+00:00

Security update for libwebp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2018-25010 UBUNTU-CVE-2018-25010 2026-10-02T22:26:23.417328+00:00

Affected: Ubuntu:Pro:14.04:LTS: libwebp, Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:20.04:LTS: libwebp

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1123 WID-SEC-W-2023-1123 — Red Hat Enterprise Linux (libwebp): Mehrere Schwachstellen 2026-10-02T22:26:23.417350+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux libwebp ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder Sicherheitsvorkehrungen zu umgehen.