Approved changes feed: RSS · Atom
cpe:2.3:a:webmproject:libwebp:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Webmproject (041199dd-212a-5381-8ad3-ce9542ea3f81) |
|---|---|
| Product | Libwebp (e46203e4-cd61-54fe-8991-4e13a0075f3e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/posthype/libwebp |
purl2cpe | 2026-06-01 10:11:16.784938 |
pkg:deb/debian/libwebp |
purl2cpe | 2026-06-01 10:11:16.784941 |
pkg:deb/ubuntu/libwebp |
purl2cpe | 2026-06-01 10:11:16.784944 |
pkg:github/webmproject/libwebp |
purl2cpe | 2026-06-01 10:11:16.784947 |
pkg:googlesource/webp |
purl2cpe | 2026-06-01 10:11:16.784950 |
pkg:nuget/vii.libwebp |
purl2cpe | 2026-06-01 10:11:16.784952 |
pkg:rpm/centos/libwebp |
purl2cpe | 2026-06-01 10:11:16.784955 |
pkg:rpm/fedora/libwebp |
purl2cpe | 2026-06-01 10:11:16.784958 |
pkg:rpm/opensuse/libwebp |
purl2cpe | 2026-06-01 10:11:16.784960 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-4863 |
vulnerable | 2026-06-08 06:16:14.760833 |
Details available
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
Published: 2023-09-12T14:24:59.275Z
Updated: 2025-10-21T23:05:38.429Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-1999 |
vulnerable | 2026-06-08 05:52:37.377161 |
Use after free in libwebp
MEDIUM (5.3)
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
Published: 2023-06-20T11:28:52.547Z
Updated: 2025-02-13T16:39:44.993Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36332 |
vulnerable | 2026-06-08 05:25:02.977142 |
Details available
A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest threat from this vulnerability is to the service availability.
Published: 2021-05-21T16:21:29.000Z
Updated: 2024-08-04T17:23:10.434Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36331 |
vulnerable | 2026-06-08 05:25:02.976322 |
Details available
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Published: 2021-05-21T16:20:33.000Z
Updated: 2024-08-04T17:23:10.465Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36330 |
vulnerable | 2026-06-08 05:25:02.975633 |
Details available
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Published: 2021-05-21T16:19:44.000Z
Updated: 2024-08-04T17:23:10.522Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36329 |
vulnerable | 2026-06-08 05:25:02.974846 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-36328 |
vulnerable | 2026-06-08 05:25:02.971352 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25014 |
vulnerable | 2026-06-08 05:11:29.130197 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25013 |
vulnerable | 2026-06-08 05:11:29.129639 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25012 |
vulnerable | 2026-06-08 05:11:29.129126 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25011 |
vulnerable | 2026-06-08 05:11:29.128579 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25010 |
vulnerable | 2026-06-08 05:11:29.128088 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-25009 |
vulnerable | 2026-06-08 05:11:29.127525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-9085 |
vulnerable | 2026-06-08 05:08:22.527609 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.