CVE-2020-36330 — Out-of-bounds Read in Libwebp
Severity
9.1CRITICALNVD
EPSS
0.2%
top 62.56%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 21
Latest updateApr 10
Description
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the service availability.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:HExploitability: 3.9 | Impact: 5.2
Affected Packages6 packages
Also affects: Debian Linux 10.0, 9.0, Enterprise Linux 8.0
Patches
🔴Vulnerability Details
3📋Vendor Advisories
7Microsoft▶
A flaw was found in libwebp in versions before 1.0.1. An out-of-bounds read was found in function ChunkVerifyAndAssign. The highest threat from this vulnerability is to data confidentiality and to the↗2021-05-11
🕵️Threat Intelligence
2Qualys▶
iOS and iPadOS 14.7 and 14.7.1 Security Update: Discover Vulnerabilities and Take Remote Response Action Using VMDR for Mobile Devices | Qualys↗2021-07-28
Qualys▶
iOS and iPadOS 14.7 and 14.7.1 Security Update: Discover Vulnerabilities and Take Remote Response Action Using VMDR for Mobile Devices↗2021-07-28