Known vulnerabilities in libwebp (Red Hat package)

Vendor: Red Hat Inc.
Software: libwebp (Red Hat package)
Software CPE: cpe:2.3:o:red_hat:libwebp_redhat_package:*:*:*:*:*:red_hat_enterprise_linux:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 13
Public exploits: 1
Known exploited (KEV): 1
Highest CVSSv4 Score: 8.7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting libwebp (Red Hat package) libwebp (Red Hat package) is affected by 13 known vulnerabilities: 1 critical, 5 high, 7 low Critical High Medium Low

Vulnerabilities (13)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU80637 - Heap-based Buffer Overflow
CVE-2023-4863		 CWE-122 Critical
Available
Exploited
 1.0.0-5.2.el8_1.1, 1.0.0-7.el8_2.1, 1.0.0-7.el8_4.1, 1.0.0-7.el8_6.1, 1.0.0-8.el8_8.1, 1.2.0-6.el9_0, 1.2.0-7.el9_2 11.09.2023 SB2023091178
SB2023091245
SB2023091265
and 137 more
#VU74824 - Double Free
CVE-2023-1999		 CWE-415 High
No
No
 0.3.0-11.el7, 1.0.0-5.2.el8_1, 1.0.0-7.el8_2, 1.0.0-7.el8_4, 1.0.0-7.el8_6, 1.0.0-8.el8_7, 1.2.0-5.el9_0, 1.2.0-6.el9_1 11.04.2023 SB2023041129
SB2023041192
SB2023042845
and 40 more
#VU53852 - Resource exhaustion
CVE-2020-36332		 CWE-400 Low
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 4 more
#VU53851 - Use of Uninitialized Variable
CVE-2018-25014		 CWE-457 High
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021060939
SB2021061301
and 6 more
#VU53850 - Out-of-bounds read
CVE-2020-36331		 CWE-125 Low
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021061301
SB2021072216
and 7 more
#VU53849 - Out-of-bounds read
CVE-2020-36330		 CWE-125 Low
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021061301
SB2021072216
and 7 more
#VU53848 - Out-of-bounds read
CVE-2018-25013		 CWE-125 Low
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 7 more
#VU53847 - Out-of-bounds read
CVE-2018-25012		 CWE-125 Low
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021060230
SB2021060421
and 4 more
#VU53846 - Out-of-bounds read
CVE-2018-25010		 CWE-125 Low
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021061301
SB2021072216
and 6 more
#VU53845 - Out-of-bounds read
CVE-2018-25009		 CWE-125 Low
No
No
 1.0.0-5.el8 07.06.2021 SB2021060725
SB2021061301
SB2021060230
and 5 more
#VU53844 - Heap-based Buffer Overflow
CVE-2018-25011		 CWE-122 High
No
No
 0.3.0-10.el7_9, 1.0.0-3.el8_4, 1.0.0-4.el8_1, 1.0.0-4.el8_2 07.06.2021 SB2021060725
SB2021060726
SB2021060931
and 15 more
#VU53843 - Heap-based Buffer Overflow
CVE-2020-36328		 CWE-122 High
No
No
 0.3.0-10.el7_9, 1.0.0-3.el8_4, 1.0.0-4.el8_1, 1.0.0-4.el8_2 07.06.2021 SB2021060725
SB2021060726
SB2021060931
and 15 more
#VU53842 - Use After Free
CVE-2020-36329		 CWE-416 High
No
No
 0.3.0-10.el7_9, 1.0.0-3.el8_4, 1.0.0-4.el8_1, 1.0.0-4.el8_2 07.06.2021 SB2021060725
SB2021060726
SB2021060931
and 15 more