Beveiligingsadvies

CVE-2023-1999

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2023-06-20 11:28:52

Laatst bijgewerkt 2025-02-13 16:39:44

Toegewezen door Google

CVSS-score 5.3

Status PUBLISHED

Beschrijving

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.

← Alle CVE's bekijken Bekijk op cve.org ↗