CVE-2023-1999
- Source
- https://nvd.nist.gov/vuln/detail/CVE-2023-1999
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-1999.json
- Related
- Published
- 2023-06-20T12:15:09Z
- Modified
- 2023-11-29T09:36:11.660150Z
- Details
-
There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
- References
Affected packages
Alpine:v3.15 / libwebp
Package
- Name
- libwebp
Alpine:v3.16 / libwebp
Package
- Name
- libwebp
Alpine:v3.17 / libwebp
Package
- Name
- libwebp
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed1.2.4-r2
Affected versions
0.*
0.1.2-r0
0.1.2-r1
0.1.3-r0
0.1.99-r0
0.2.0-r0
0.2.1-r0
0.3.0-r0
0.3.1-r0
0.3.1-r1
0.4.0-r1
0.4.1-r0
0.4.2-r0
0.4.3-r0
0.4.4-r0
0.5.0-r0
0.5.1-r0
0.5.2-r0
0.6.0-r0
0.6.0-r1
0.6.1-r0
1.*
1.0.0-r0
1.0.1-r0
1.0.2-r0
1.0.3-r0
1.1.0-r0
1.2.0-r0
1.2.0-r1
1.2.0-r2
1.2.1-r2
1.2.2-r2
1.2.3-r2
Alpine:v3.18 / libwebp
Package
- Name
- libwebp
Affected ranges
- Type
- ECOSYSTEM
- Events
-
Introduced0The exact introduced commit is unknownFixed1.3.0-r2
Affected versions
0.*
0.1.2-r0
0.1.2-r1
0.1.3-r0
0.1.99-r0
0.2.0-r0
0.2.1-r0
0.3.0-r0
0.3.1-r0
0.3.1-r1
0.4.0-r1
0.4.1-r0
0.4.2-r0
0.4.3-r0
0.4.4-r0
0.5.0-r0
0.5.1-r0
0.5.2-r0
0.6.0-r0
0.6.0-r1
0.6.1-r0
1.*
1.0.0-r0
1.0.1-r0
1.0.2-r0
1.0.3-r0
1.1.0-r0
1.2.0-r0
1.2.0-r1
1.2.0-r2
1.2.1-r0
1.2.2-r0
1.2.3-r0
1.2.4-r0
1.2.4-r1
1.3.0-r0
1.3.0-r1