Vulnerability · Published May 21, 2021 · Assigned by redhat
CVE-2020-36328
Critical 9.8
In plain English
A critical-severity out-of-bounds write in libwebp. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.7% (higher than 86% of all known vulnerabilities). Fixed versions are available - upgrade the affected package.
Severity (CVSS NVD)9.8Critical
Exploit odds (30 days)2.7%top 14.2% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.
Affected packages & fixed versions
| Ecosystem | Package | Fixed in | Advisory |
|---|---|---|---|
| Debian:12 | libwebp | 0.6.1-2.1 | DEBIAN-CVE-2020-36328 |
| Debian:13 | libwebp | 0.6.1-2.1 | DEBIAN-CVE-2020-36328 |
| Debian:14 | libwebp | 0.6.1-2.1 | DEBIAN-CVE-2020-36328 |
| Rocky Linux:8 | libwebp | 0:1.0.0-3.el8_4 | RLSA-2021:2354 |
Affected products (as reported)
Weakness: CWE-787
References
- https://bugzilla.redhat.com/show_bug.cgi?id=1956829 x_refsource_MISC
- [debian-lts-announce] 20210605 [SECURITY] [DLA 2672-1] libwebp security update mailing-list, x_refsource_MLIST
- [debian-lts-announce] 20210606 [SECURITY] [DLA 2677-1] libwebp security update mailing-list, x_refsource_MLIST
- DSA-4930 vendor-advisory, x_refsource_DEBIAN
- https://support.apple.com/kb/HT212601 x_refsource_CONFIRM
- 20210723 APPLE-SA-2021-07-21-1 iOS 14.7 and iPadOS 14.7 mailing-list, x_refsource_FULLDISC
- https://security.netapp.com/advisory/ntap-20211112-0001/ x_refsource_CONFIRM