There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.
{ "binaries": [ { "binary_name": "libwebp-dev", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "libwebp5", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "libwebp5-dbgsym", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "libwebpdemux1", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "libwebpdemux1-dbgsym", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "libwebpmux1", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "libwebpmux1-dbgsym", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "webp", "binary_version": "0.4.4-1ubuntu0.1~esm2" }, { "binary_name": "webp-dbgsym", "binary_version": "0.4.4-1ubuntu0.1~esm2" } ], "availability": "Available with Ubuntu Pro (Infra-only): https://ubuntu.com/pro", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "firefox", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-dbg", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-dev", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-geckodriver", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-af", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-an", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ar", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-as", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ast", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-az", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-be", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-bg", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-bn", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-br", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-bs", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ca", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-cak", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-cs", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-csb", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-cy", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-da", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-de", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-el", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-en", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-eo", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-es", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-et", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-eu", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-fa", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-fi", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-fr", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-fy", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ga", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-gd", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-gl", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-gn", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-gu", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-he", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-hi", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-hr", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-hsb", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-hu", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-hy", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ia", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-id", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-is", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-it", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ja", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ka", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-kab", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-kk", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-km", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-kn", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ko", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ku", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-lg", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-lt", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-lv", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-mai", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-mk", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ml", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-mn", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-mr", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ms", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-my", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-nb", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ne", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-nl", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-nn", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-nso", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-oc", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-or", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-pa", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-pl", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-pt", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ro", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ru", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-si", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-sk", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-sl", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-sq", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-sr", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-sv", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-sw", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-szl", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ta", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-te", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-th", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-tr", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-uk", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-ur", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-uz", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-vi", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-xh", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-zh-hans", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-zh-hant", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-locale-zu", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" }, { "binary_name": "firefox-mozsymbols", "binary_version": "112.0.2+build1-0ubuntu0.18.04.1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libwebp-dev", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "libwebp6", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "libwebp6-dbgsym", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "libwebpdemux2", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "libwebpdemux2-dbgsym", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "libwebpmux3", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "libwebpmux3-dbgsym", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "webp", "binary_version": "0.6.1-2ubuntu0.18.04.2" }, { "binary_name": "webp-dbgsym", "binary_version": "0.6.1-2ubuntu0.18.04.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libwebp-dev", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "libwebp6", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "libwebp6-dbgsym", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "libwebpdemux2", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "libwebpdemux2-dbgsym", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "libwebpmux3", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "libwebpmux3-dbgsym", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "webp", "binary_version": "0.6.1-2ubuntu0.20.04.2" }, { "binary_name": "webp-dbgsym", "binary_version": "0.6.1-2ubuntu0.20.04.2" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }
{ "binaries": [ { "binary_name": "libwebp-dev", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "libwebp7", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "libwebp7-dbgsym", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "libwebpdemux2", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "libwebpdemux2-dbgsym", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "libwebpmux3", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "libwebpmux3-dbgsym", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "webp", "binary_version": "1.2.2-2ubuntu0.22.04.1" }, { "binary_name": "webp-dbgsym", "binary_version": "1.2.2-2ubuntu0.22.04.1" } ], "availability": "No subscription required", "ubuntu_priority": "medium" }