Webmproject

webmproject

25 CVEs • 3 products

Products (3)

Click to collapse

Toggle

CVEs (25)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2018-6548 1Webmproject 1Libwebm Jun 17, 2026 Feb 2, 2018 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, its property frame_ would not be changed because of code in vp9parser::Vp9HeaderParser::SetFrame. Its...Show more A use-after-free issue was discovered in libwebm through 2018-02-02. If a Vp9HeaderParser was initialized once before, its property frame_ would not be changed because of code in vp9parser::Vp9HeaderParser::SetFrame. Its frame_ could be freed while the corresponding pointer would not be updated, leading to a dangling pointer. This is related to the function OutputCluster in webm_info.cc.Show less
CVE-2018-6406 1Webmproject 1Libwebm Jun 17, 2026 Jan 30, 2018 N/A· v4 8.8 HIGH· v3 6.8 MEDIUM· v2 The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information...Show more The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact.Show less
CVE-2016-9085 2Fedoraproject Webmproject 2Fedora Libwebp May 13, 2026 Feb 3, 2017 N/A· v4 3.3 LOW· v3 2.1 LOW· v2 Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
CVE-2012-0823 1Webmproject 1Libvpx Apr 29, 2026 Feb 23, 2012 N/A· v4 N/A· v3 5.0 MEDIUM· v2 VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an o...Show more VP8 Codec SDK (libvpx) before 1.0.0 "Duclair" allows remote attackers to cause a denial of service (application crash) via (1) unspecified "corrupt input" or (2) by "starting decoding from a P-frame," which triggers an out-of-bounds read, related to "the clamping of motion vectors in SPLITMV blocks".Show less
CVE-2010-4203 3Google RedhatWebmproject 5Chrome Enterprise Linux DesktopEnterprise Linux Server+2 more Apr 29, 2026 Nov 6, 2010 N/A· v4 9.8 CRITICAL· v3 10.0 HIGH· v2 WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames...Show more WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.Show less