libwebp (SUSE:Manager Server 4.0) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the SUSE:Manager Server 4.0 package libwebp, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (10)

• CVE-2020-36329 — CVSS 9.8 (critical): A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat…
• CVE-2018-25011 — CVSS 9.8 (critical): A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in PutLE16().
• CVE-2020-36328 — CVSS 9.8 (critical): A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an…
• CVE-2018-25013 — CVSS 9.1 (critical): A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
• CVE-2020-36330 — CVSS 9.1 (critical): A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat…
• CVE-2020-36331 — CVSS 9.1 (critical): A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkAssignData. The highest threat from…
• CVE-2018-25009 — CVSS 9.1 (critical): A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
• CVE-2018-25010 — CVSS 9.1 (critical): A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ApplyFilter().
• CVE-2018-25012 — CVSS 9.1 (critical): A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
• CVE-2020-36332 — CVSS 7.5 (high): A flaw was found in libwebp in versions before 1.0.1. When reading a file libwebp allocates an excessive amount of memory. The highest…