Libwebp

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-4863 Sep 12, 15:15 LIB HIGH POC KEV PATCH THREAT This Week

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Buffer Overflow Chrome Google Memory Corruption Microsoft +18

NVD GitHub

CVSS 3.1

8.8

EPSS

99.7%

CVE-2023-1999 Jun 20, 12:15 HIGH This Week

There exists a use after free/double free in libwebp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Denial Of Service Use After Free Memory Corruption Libwebp Webmproject

NVD

CVSS 3.1

7.5

EPSS

1.0%

CVE-2016-9085 Feb 03, 15:59 LOW PATCH Monitor

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Fedora Libwebp Fedoraproject +1

NVD

CVSS 3.1

3.3

EPSS

0.1%

CVE-2023-4863 LIB

EPSS 100% CVSS 8.8

HIGH POC KEV PATCH THREAT This Week

Buffer Overflow Chrome Google +20

NVD GitHub

CVE-2023-1999

EPSS 1% CVSS 7.5

HIGH This Week

Denial Of Service Use After Free Memory Corruption +2

NVD

CVE-2016-9085

EPSS 0% CVSS 3.3

LOW PATCH Monitor

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Buffer Overflow Integer Overflow Fedora +3

NVD