Known vulnerabilities in libwebp

Software: libwebp
Software CPE: cpe:2.3:a:developers.google.com:libwebp:*:*:*:*:*:*:*:*
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libwebp libwebp is affected by 13 known vulnerabilities: 1 critical, 4 high, 1 medium, 7 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863
CWE-122 Critical
Available
Exploited
1.3.2 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU53852 - Resource exhaustion
CVE-2020-36332
CWE-400 Low
No
No
1.0.1 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 4 more
#VU53851 - Use of Uninitialized Variable
CVE-2018-25014
CWE-457 High
No
No
1.0.1 07.06.2021 SB2021060725
SB2021060939
SB2021061301
and 6 more
#VU53850 - Out-of-bounds read
CVE-2020-36331
CWE-125 Low
No
No
1.0.1 07.06.2021 SB2021060725
SB2021061301
SB2021072216
and 7 more
#VU53849 - Out-of-bounds read
CVE-2020-36330
CWE-125 Low
No
No
1.0.1 07.06.2021 SB2021060725
SB2021061301
SB2021072216
and 7 more
#VU53848 - Out-of-bounds read
CVE-2018-25013
CWE-125 Low
No
No
1.0.1 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 7 more
#VU53847 - Out-of-bounds read
CVE-2018-25012
CWE-125 Low
No
No
1.0.1 07.06.2021 SB2021060725
SB2021060230
SB2021060421
and 4 more
#VU53846 - Out-of-bounds read
CVE-2018-25010
CWE-125 Low
No
No
1.0.1 07.06.2021 SB2021060725
SB2021061301
SB2021072216
and 6 more
#VU53845 - Out-of-bounds read
CVE-2018-25009
CWE-125 Low
No
No
1.0.1 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 5 more
#VU53844 - Heap-based Buffer Overflow
CVE-2018-25011
CWE-122 High
No
No
1.0.1 07.06.2021 SB2021060725
SB2021060726
SB2021060931
and 15 more
#VU53843 - Heap-based Buffer Overflow
CVE-2020-36328
CWE-122 High
No
No
1.0.1 07.06.2021 SB2021060725
SB2021060726
SB2021060931
and 15 more
#VU53842 - Use After Free
CVE-2020-36329
CWE-416 High
No
No
1.0.1 07.06.2021 SB2021060725
SB2021060726
SB2021060931
and 15 more
#VU35877 - Double Free
CVE-2016-9969
CWE-415 Medium
No
No
- 23.05.2019 SB2019052332
SB2025061059