ZeroHour

CVE-2020-36329

CVSS 3.1
9.8 critical
EPSS
2%p82
Published
()
Modified
Description

A flaw was found in libwebp in versions before 1.0.1. A use-after-free was found due to a thread being killed too early. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Vendors
webmprojectredhatnetappdebianapple
Products
libwebp, enterprise linux, ontap select deploy administration utility, debian linux, ipados, iphone os
Weakness
CWE-416
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.