DEBIAN-CVE-2020-36331

DEBIAN-CVE-2020-36331 PUBLISHED CVSS 9.100000381469727 CRITICAL

A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from this vulnerability is to data confidentiality and to the service availability.

Risk Scores

CVSS v3.1

9.100000381469727

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H

Affected Products

Vendor	Product	Versions
Debian:12	libwebp	0, 0, 0
Debian:11	libwebp	0, 0, 0
Debian:14	libwebp	0, 0, 0
Debian:13	libwebp	0, 0, 0

Timeline

May 21, 2021 CVE Published
Apr 28, 2026 CVE Updated

References

https://security-tracker.debian.org/tracker/CVE-2020-36331 advisory

Open in Interactive Console →