Known vulnerabilities in libwebp (Debian package)
Vendor:
Debian
Software:
libwebp (Debian package)
Software CPE:
cpe:2.3:o:debian:libwebp_debian_package:*:*:*:*:*:debian_linux:*:*
Website:
https://www.debian.org/
Total vulnerabilities:
12
Public exploits:
1
Known exploited (KEV):
1
Highest CVSSv4 Score:
8.7
Breakdown by Severity Chart
0.6.1-2.1+deb11u2
1.2.4-0.2+deb12u1
0.6.1-2.1+deb11u1
0.6.1-2+deb10u1
0.6.1
0.5.2
0.4.1
0.4.0-4.1
0.4.4-1+sparc64
0.6.1-2
0.6.1-1
0.6.0-4
0.6.0-3
0.1.3-3+nmu1
0.1-1
0.1.2-1
0.1.3-1
0.1.3-2
0.1.3-2.1
0.1.3-3
0.2.1-1
0.2.1-2
0.2.1-3
0.3.0-1
0.3.0-3
0.4.0-2
0.4.0-3
0.4.0-4
0.4.1-1
0.4.1-1.1
0.4.1-1.2
0.4.3-1
0.4.3-1.1
0.4.3-1.2
0.4.3-1.3
0.4.4-1
0.4.4-1.1
0.5.1-1
0.5.1-2
0.5.1-3
0.5.1-4
0.5.2-1
0.6.0-1
Vulnerabilities (12)
| Vulnerability | CWE-ID | CSH Severity | Public Exploit | KEV | First fixed release | Published | Bulletins |
|---|---|---|---|---|---|---|---|
| #VU80637 - Heap-based Buffer Overflow CVE-2023-4863 |
CWE-122 | Critical | 0.6.1-2.1+deb11u2, 1.2.4-0.2+deb12u1 | 11.09.2023 |
SB2023091178 SB2023091245 SB2023091265 and 137 more |
||
| #VU74824 - Double Free CVE-2023-1999 |
CWE-415 | High | 0.6.1-2.1+deb11u1 | 11.04.2023 |
SB2023041129 SB2023041192 SB2023042845 and 40 more |
||
| #VU53852 - Resource exhaustion CVE-2020-36332 |
CWE-400 | Low | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021061301 SB2021060230 and 4 more |
||
| #VU53851 - Use of Uninitialized Variable CVE-2018-25014 |
CWE-457 | High | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021060939 SB2021061301 and 6 more |
||
| #VU53850 - Out-of-bounds read CVE-2020-36331 |
CWE-125 | Low | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021061301 SB2021072216 and 7 more |
||
| #VU53849 - Out-of-bounds read CVE-2020-36330 |
CWE-125 | Low | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021061301 SB2021072216 and 7 more |
||
| #VU53848 - Out-of-bounds read CVE-2018-25013 |
CWE-125 | Low | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021061301 SB2021060230 and 7 more |
||
| #VU53846 - Out-of-bounds read CVE-2018-25010 |
CWE-125 | Low | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021061301 SB2021072216 and 6 more |
||
| #VU53845 - Out-of-bounds read CVE-2018-25009 |
CWE-125 | Low | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021061301 SB2021060230 and 5 more |
||
| #VU53844 - Heap-based Buffer Overflow CVE-2018-25011 |
CWE-122 | High | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021060726 SB2021060931 and 15 more |
||
| #VU53843 - Heap-based Buffer Overflow CVE-2020-36328 |
CWE-122 | High | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021060726 SB2021060931 and 15 more |
||
| #VU53842 - Use After Free CVE-2020-36329 |
CWE-416 | High | 0.6.1-2+deb10u1 | 07.06.2021 |
SB2021060725 SB2021060726 SB2021060931 and 15 more |