WE
Vendor
Webmproject
25
CVEs
2
On KEV
0
New 30D
Products
LI9.8
Libwebp
Webmproject
15 CVEs1 on KEV0 new
LI9.8
Libvpx
Webmproject
6 CVEs1 on KEV0 new
LI9.8
Libwebm
Webmproject
4 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2024-5197 | LI Libvpx Webmproject | 9.1 | Jun 3 | There exists interger overflows in libvpx in versions prior to 1.14.1. Calling vpx_img_alloc() with a large value of the d_w, d_h, or align parameter may result in integer… |
| CVE-2023-6349 | LI Libvpx Webmproject | 7.5 | May 27 | A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx |
| CVE-2023-44488 | LI Libvpx Webmproject | 7.5 | Sep 30 | VP9 in libvpx before 1.13.1 mishandles widths, leading to a crash related to encoding |
| CVE-2023-5217 In wildKEV | LI Libvpx Webmproject | 8.8 | Sep 28 | Google Chromium libvpx Heap Buffer Overflow Vulnerability |
| CVE-2023-4863 In wildKEV | LI Libwebp Webmproject | 8.8 | Sep 12 | Google Chromium WebP Heap-Based Buffer Overflow Vulnerability |
| CVE-2023-1999 | LI Libwebp Webmproject | 7.5 | Jun 20 | There exists a use after free/double free in libwebp |
| CVE-2020-36332 | LI Libwebp Webmproject | 7.5 | May 21 | A flaw was found in libwebp in versions before 1.0.1 |
| CVE-2020-36331 | LI Libwebp Webmproject | 9.1 | May 21 | A flaw was found in libwebp in versions before 1.0.1 |
| CVE-2020-36330 | LI Libwebp Webmproject | 9.1 | May 21 | A flaw was found in libwebp in versions before 1.0.1 |
| CVE-2020-36329 | LI Libwebp Webmproject | 9.8 | May 21 | A flaw was found in libwebp in versions before 1.0.1 |
| CVE-2020-36328 | LI Libwebp Webmproject | 9.8 | May 21 | A flaw was found in libwebp in versions before 1.0.1 |
| CVE-2018-25014 | LI Libwebp Webmproject | 9.8 | May 21 | A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol() |
| CVE-2018-25013 | LI Libwebp Webmproject | 9.1 | May 21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes() |
| CVE-2018-25012 | LI Libwebp Webmproject | 9.1 | May 21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24() |
| CVE-2018-25011 | LI Libwebp Webmproject | 9.8 | May 21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16() |
| CVE-2018-25010 | LI Libwebp Webmproject | 9.1 | May 21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter() |
| CVE-2018-25009 | LI Libwebp Webmproject | 9.1 | May 21 | A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16() |
| CVE-2016-9969 | LI Libwebp Webmproject | 7.5 | May 23 | In libwebp 0.5.1, there is a double free bug in libwebpmux |
| CVE-2019-9746 | LI Libwebm Webmproject | 7.5 | Mar 13 | In libwebm before 2019-03-08, a NULL pointer dereference caused by the functions OutputCluster and OutputTracks in webm_info.cc will trigger an abort, which allows a DoS attack, a… |
| CVE-2018-19212 | LI Libwebm Webmproject | 6.5 | Nov 12 | In libwebm through 2018-10-03, there is an abort caused by libwebm::Webm2Pes::InitWebmParser() that will lead to a DoS attack |
| CVE-2018-6548 | LI Libwebm Webmproject | 9.8 | Feb 2 | A use-after-free issue was discovered in libwebm through 2018-02-02 |
| CVE-2018-6406 | LI Libwebm Webmproject | 8.8 | Jan 30 | The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows… |
| CVE-2016-9085 | LI Libwebp Webmproject | 3.3 | Feb 3 | Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors |
| CVE-2012-0823 | LI Libvpx Webmproject | – | Feb 23 | VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting… |
| CVE-2010-4203 | LI Libvpx Webmproject | 9.8 | Nov 5 | WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly… |