https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 21:31:05 +0000 https://cve.radiocsirt.org/vuln/alsa-2021:4231 <p><strong>Affected:</strong> AlmaLinux:8: libwebp, AlmaLinux:8: libwebp-devel</p> <p>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.</p> <p>Security Fix(es):</p> <p>* libwebp: out-of-bounds read in WebPMuxCreateInternal (CVE-2018-25009)</p> <p>* libwebp: out-of-bounds read in ApplyFilter() (CVE-2018-25010)</p> <p>* libwebp: out-of-bounds read in WebPMuxCreateInternal() (CVE-2018-25012)</p> <p>* libwebp: out-of-bounds read in ShiftBytes() (CVE-2018-25013)</p> <p>* libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)</p> <p>* libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c (CVE-2020-36330)</p> <p>* libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c (CVE-2020-36331)</p> <p>* libwebp: excessive memory allocation when reading a file (CVE-2020-36332)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> <p><strong>Affected:</strong> AlmaLinux:8: libwebp, AlmaLinux:8: libwebp-devel</p> <p>The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.</p> <p>Security Fix(es):</p> <p>* libwebp: out-of-bounds read in WebPMuxCreateInternal (CVE-2018-25009)</p> <p>* libwebp: out-of-bounds read in ApplyFilter() (CVE-2018-25010)</p> <p>* libwebp: out-of-bounds read in WebPMuxCreateInternal() (CVE-2018-25012)</p> <p>* libwebp: out-of-bounds read in ShiftBytes() (CVE-2018-25013)</p> <p>* libwebp: use of uninitialized value in ReadSymbol() (CVE-2018-25014)</p> <p>* libwebp: out-of-bounds read in ChunkVerifyAndAssign() in mux/muxread.c (CVE-2020-36330)</p> <p>* libwebp: out-of-bounds read in ChunkAssignData() in mux/muxinternal.c (CVE-2020-36331)</p> <p>* libwebp: excessive memory allocation when reading a file (CVE-2020-36332)</p> <p>For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.</p> <p>Additional Changes:</p> <p>For detailed information on changes in this release, see the AlmaLinux Release Notes linked from the References section.</p> https://cve.radiocsirt.org/vuln/alsa-2021:4231 https://cve.radiocsirt.org/vuln/bdu:2021-03105 bdu:2021-03105 https://cve.radiocsirt.org/vuln/bdu:2021-03105 https://cve.radiocsirt.org/vuln/certfr-2021-avi-562 certfr-2021-avi-562 https://cve.radiocsirt.org/vuln/certfr-2021-avi-562 https://cve.radiocsirt.org/vuln/cnvd-2021-37657 cnvd-2021-37657 https://cve.radiocsirt.org/vuln/cnvd-2021-37657 https://cve.radiocsirt.org/vuln/euvd-2026-48125 EUVD-2026-48125 https://cve.radiocsirt.org/vuln/euvd-2026-48125 https://cve.radiocsirt.org/vuln/fkie_cve-2020-36331 <p>A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.</p> <p>A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-36331 https://cve.radiocsirt.org/vuln/ghsa-hrq2-3wxg-w5m6 <p>A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.</p> <p>A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.</p> https://cve.radiocsirt.org/vuln/ghsa-hrq2-3wxg-w5m6 https://cve.radiocsirt.org/vuln/gsd-2020-36331 gsd-2020-36331 https://cve.radiocsirt.org/vuln/gsd-2020-36331 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36331 msrc_CVE-2020-36331 https://cve.radiocsirt.org/vuln/msrc_cve-2020-36331 https://cve.radiocsirt.org/vuln/opensuse-su-2021:1860-1 <p>Security update for libwebp</p> <p>Security update for libwebp</p> https://cve.radiocsirt.org/vuln/opensuse-su-2021:1860-1 https://cve.radiocsirt.org/vuln/suse-su-2021:1830-1 <p>Security update for libwebp</p> <p>Security update for libwebp</p> https://cve.radiocsirt.org/vuln/suse-su-2021:1830-1 https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36331 <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libwebp, Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:20.04:LTS: libwebp</p> <p>A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.</p> <p><strong>Affected:</strong> Ubuntu:Pro:14.04:LTS: libwebp, Ubuntu:Pro:16.04:LTS: libwebp, Ubuntu:18.04:LTS: libwebp, Ubuntu:20.04:LTS: libwebp</p> <p>A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.</p> https://cve.radiocsirt.org/vuln/ubuntu-cve-2020-36331 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1123 <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux libwebp ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder Sicherheitsvorkehrungen zu umgehen.</p> <p>Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Red Hat Enterprise Linux libwebp ausnutzen, um Informationen offenzulegen, einen Denial of Service zu verursachen oder Sicherheitsvorkehrungen zu umgehen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2023-1123