CVE-2018-25009 PUBLISHED

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().

EPSS 0.45% · 63.3th percentile

Risk Scores

EPSS Score
0.45%
63.3th percentile

Affected Products

VendorProductVersions
Ubuntu:Pro:14.04:LTSlibwebp0, 0.3.0-3, 0.4.0-4
Ubuntu:18.04:LTSlibwebp0, 0.6.0-3, 0.6.0-4
Ubuntu:Pro:16.04:LTSlibwebp0.4.3-1.3, 0.4.3-1.3build1, 0.4.4-1
Ubuntu:20.04:LTSlibwebp0, 0.6.1-2

Timeline

References

Open in Interactive Console →