VDB
GHSA-9q78-27f3-2jmh
GHSA-9q78-27f3-2jmh
PUBLISHED
CVSS 6.199999809265137 MEDIUM
webp crate may expose memory contents when encoding an image
Risk Scores
CVSS 3.1
6.199999809265137
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| crates.io | webp | 0 |
| wolfi | zola | 0 |
| chainguard | zola | 0 |
Timeline
- Aug 29, 2025 CVE Published
- Sep 10, 2026 CVE Updated
References
- https://github.com/advisories/GHSA-9q78-27f3-2jmh advisory
- https://github.com/jaredforth/webp/issues/40 url
- https://github.com/jaredforth/webp/pull/44 patch
- https://github.com/jaredforth/webp/commit/62b47060d7fb8cc0e92e522ee54948edf5aab556 patch
- https://github.com/jaredforth/webp url
- https://rustsec.org/advisories/RUSTSEC-2024-0443.html url