CVE-2016-9085 Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
LowCVSS 3.3
EPSS 0.43%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| debian/libwebp(Debian:12) | < 0.5.1-3 | 0.5.1-3 |
| debian/libwebp(Debian:13) | < 0.5.1-3 | 0.5.1-3 |
| debian/libwebp(Debian:14) | < 0.5.1-3 | 0.5.1-3 |
| webmproject libwebp | <= 0.5.2 | No fix listed |
| fedoraproject fedora | = 24 | No fix listed |
| fedoraproject fedora | = 25 | No fix listed |
References
- Debian Security Tracker CVE-2016-9085 vendor-advisory
- [oss-security] 20161027 Re: CVE requests: some issues in gif2webp mailing-list patch third-party-advisory
- 93928 third-party-advisory vdb-entry
- bugzilla.redhat.com issue-tracking patch third-party-advisory
- chromium.googlesource.com issue-tracking patch third-party-advisory
- [mina-dev] 20210225 [jira] [Created] (FTPSERVER-500) Security vulnerability in common/lib/log4j-1.2.17.jar mailing-list
- FEDORA-2016-00d2f5c19f vendor-advisory
- FEDORA-2016-160ec6525e vendor-advisory
- FEDORA-2016-26ef59f03d vendor-advisory
- GLSA-201701-61 third-party-advisory vdb-entry vendor-advisory
- bugs.debian.org issue-tracking