Most recent entries from all

ALSA-2021:4231 — Moderate: libwebp security update

2026-10-04T08:58:52.888929+00:00

Affected: AlmaLinux:8: libwebp, AlmaLinux:8: libwebp-devel

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* libwebp: out-of-bounds read in WebPMuxCreateInternal (CVE-2018-25009)

* libwebp: out-of-bounds read in ApplyFilter() (CVE-2018-25010)

* libwebp: out-of-bounds read in WebPMuxCreateInternal() (CVE-2018-25012)

* libwebp: out-of-bounds read in ShiftBytes() (CVE-2018-25013)

* libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)

* libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c (CVE-2020-36330)

* libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c (CVE-2020-36331)

* libwebp: excessive memory allocation when reading a file (CVE-2020-36332)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Additional Changes:

For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.

bdu:2021-03107

2026-10-04T08:58:52.889004+00:00

bdu:2021-03107

Withdrawn: BELL-CVE-2020-36332 — CVE-2020-36332 does not affect BellSoft software

2026-10-04T08:58:52.889022+00:00

Withdrawn by the publisher.

cnvd-2021-37658

2026-10-04T08:58:52.889039+00:00

cnvd-2021-37658

EUVD-2026-48108

2026-10-04T08:58:52.889051+00:00

EUVD-2026-48108

fkie_cve-2020-36332

2026-10-04T08:58:52.889062+00:00

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

GHSA-fx92-p77r-3r2c

2026-10-04T08:58:52.889083+00:00

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

gsd-2020-36332

2026-10-04T08:58:52.889096+00:00

gsd-2020-36332

msrc_CVE-2020-36332 — A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memo…

2026-10-04T08:58:52.889106+00:00

msrc_CVE-2020-36332

openSUSE-SU-2021:1860-1 — Security update for libwebp

2026-10-04T08:58:52.889123+00:00

Security update for libwebp

SUSE-SU-2021:1830-1 — Security update for libwebp

2026-10-04T08:58:52.889142+00:00

Security update for libwebp

UBUNTU-CVE-2020-36332

2026-10-04T08:58:52.889161+00:00

Affected: Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:20.04:LTS: libwebp

A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.

WID-SEC-W-2023-1123 — Red Hat Enterprise Linux (libwebp): Mehrere Schwachstellen

2026-10-04T08:58:52.889183+00:00

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux libwebp ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder Sicherheitsvorkehrungen zu umgehen.