https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T04:04:43.833326+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/alsa-2023:2076 ALSA-2023:2076 — Important: libwebp security update 2026-10-03T04:04:43.870468+00:00

Affected: AlmaLinux:8: libwebp, AlmaLinux:8: libwebp-devel

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

* Mozilla: libwebp: Double-free in libwebp (CVE-2023-1999)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

 https://cve.radiocsirt.org/vuln/bdu:2023-02923 bdu:2023-02923 2026-10-03T04:04:43.870540+00:00 bdu:2023-02923 https://cve.radiocsirt.org/vuln/bell-cve-2023-1999 Withdrawn: BELL-CVE-2023-1999 — CVE-2023-1999 does not affect BellSoft software 2026-10-03T04:04:43.870558+00:00

Withdrawn by the publisher.

https://cve.radiocsirt.org/vuln/certfr-2023-avi-0513 certfr-2023-avi-0513 — De multiples vulnérabilités ont été découvertes dans les produits <span class="textit">IBM</span>. Elles permettent à u… 2026-10-03T04:04:43.870574+00:00 certfr-2023-avi-0513 https://cve.radiocsirt.org/vuln/euvd-2026-216184 EUVD-2026-216184 2026-10-03T04:04:43.870590+00:00 EUVD-2026-216184 https://cve.radiocsirt.org/vuln/fkie_cve-2023-1999 fkie_cve-2023-1999 2026-10-03T04:04:43.870601+00:00

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.

 https://cve.radiocsirt.org/vuln/ghsa-8x9p-cw2c-6253 GHSA-8x9p-cw2c-6253 2026-10-03T04:04:43.870623+00:00

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.

 https://cve.radiocsirt.org/vuln/gsd-2023-1999 gsd-2023-1999 2026-10-03T04:04:43.870639+00:00 gsd-2023-1999 https://cve.radiocsirt.org/vuln/oesa-2023-1317 OESA-2023-1317 — libwebp security update 2026-10-03T04:04:43.870649+00:00

Affected: openEuler:20.03-LTS-SP1: libwebp, openEuler:20.03-LTS-SP3: libwebp, openEuler:22.03-LTS: libwebp, openEuler:22.03-LTS-SP1: libwebp

This is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently. Security Fix(es): A vulnerability was found in libwebp (affected version unknown). It has been declared as critical. Affected by this vulnerability is an unknown code of the component Image File Handler. There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.(CVE-2023-1999)

 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13019-1 openSUSE-SU-2024:13019-1 — libsharpyuv0-1.3.0-2.1 on GA media 2026-10-03T04:04:43.870676+00:00

libsharpyuv0-1.3.0-2.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:1785 RHSA-2023:1785 — Red Hat Security Advisory: firefox security update 2026-10-03T04:04:43.870693+00:00

Mozilla: Memory Corruption in Safe Browsing Code Mozilla: libwebp: Double-free in libwebp Mozilla: Fullscreen notification obscured Mozilla: Potential Memory Corruption following Garbage Collector compaction Mozilla: Invalid free from JavaScript code Mozilla: Content-Disposition filename truncation leads to Reflected File Download Mozilla: Files with malicious extensions could have been downloaded unsafely on Linux Mozilla: Incorrect optimization result on ARM64 Mozilla: Memory safety bugs fixed in Firefox 112 and Firefox ESR 102.10

 https://cve.radiocsirt.org/vuln/suse-su-2023:2552-1 SUSE-SU-2023:2552-1 — Security update for libwebp 2026-10-03T04:04:43.870723+00:00

Security update for libwebp

 https://cve.radiocsirt.org/vuln/ubuntu-cve-2023-1999 UBUNTU-CVE-2023-1999 2026-10-03T04:04:43.870736+00:00

Affected: Ubuntu:Pro:14.04:LTS: libwebp, Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:18.04:LTS: mozjs52, Ubuntu:18.04:LTS: mozjs38, Ubuntu:20.04:LTS: libwebp, Ubuntu:20.04:LTS: mozjs68, Ubuntu:20.04:LTS: mozjs52, Ubuntu:22.04:LTS: libwebp, Ubuntu:22.04:LTS: mozjs78 and 5 more

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1133 WID-SEC-W-2023-1133 — Red Hat Enterprise Linux (libwebp): Schwachstelle ermöglicht Denial of Service 2026-10-03T04:04:43.870770+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Red Hat Enterprise Linux und Oracle Linux ausnutzen, um einen Denial of Service Angriff durchzuführen.