CVE-2018-25013: Buffer Overflow
A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes().
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is CVE-2018-25013?
CVE-2018-25013 is a heap-based buffer overflow vulnerability found in libwebp in versions before 1.0.1 in the ShiftBytes() function.
What is the severity of CVE-2018-25013?
The severity of CVE-2018-25013 is critical with a CVSS score of 9.1.
Which software versions are affected by CVE-2018-25013?
The following software versions are affected by CVE-2018-25013: libwebp versions before 1.0.1, Mozilla Firefox ESR (up to version 1.0.1), and Redhat Enterprise Linux 8.0.
How can I fix CVE-2018-25013?
To fix CVE-2018-25013, update libwebp to version 1.0.1 or later.
Where can I find more information about CVE-2018-25013?
You can find more information about CVE-2018-25013 at the following references: [Reference 1](https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=9417), [Reference 2](https://bugzilla.redhat.com/show_bug.cgi?id=1956926), [Reference 3](https://chromium.googlesource.com/webm/libwebp/+/907208f97ead639bd521cf355a2f203f462eade6).