Libwebp

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2023-4863 LIB HIGH POC KEV PATCH THREAT This Week

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Rated high severity (CVSS 8.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available.

Memory Corruption Buffer Overflow Google Chrome Fedora +10

NVD GitHub

CVSS 3.1

8.8

EPSS

99.7%

CVE-2023-1999 HIGH This Week

There exists a use after free/double free in libwebp. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, no authentication required, low attack complexity. No vendor patch available.

Use After Free Denial Of Service Memory Corruption Libwebp

NVD

CVSS 3.1

7.5

EPSS

1.0%

CVE-2016-9085 LOW PATCH Monitor

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Integer Overflow Buffer Overflow Libwebp Fedora

NVD

CVSS 3.1

3.3

EPSS

0.1%

CVE-2023-4863 LIB

EPSS 100% CVSS 8.8

HIGH POC KEV PATCH THREAT This Week

Memory Corruption Buffer Overflow Google +12

NVD GitHub

CVE-2023-1999

EPSS 1% CVSS 7.5

HIGH This Week

Use After Free Denial Of Service Memory Corruption +1

NVD

CVE-2016-9085

EPSS 0% CVSS 3.3

LOW PATCH Monitor

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors. Rated low severity (CVSS 3.3), this vulnerability is low attack complexity.

Integer Overflow Buffer Overflow Libwebp +1

NVD