Description
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
n/a libwebp
libwebp 1.0.1affected
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1956853 ↗
- https://lists.debian.org/debian-lts-announce/2021/06/msg00005.html ↗
- https://lists.debian.org/debian-lts-announce/2021/06/msg00006.html ↗
- https://www.debian.org/security/2021/dsa-4930 ↗
- https://support.apple.com/kb/HT212601 ↗
- http://seclists.org/fulldisclosure/2021/Jul/54 ↗
- https://security.netapp.com/advisory/ntap-20211104-0004/ ↗