CVE Feed

    Dashboard / CVE / CVE-2020-18652

    CVE-2020-18652

    Buffer Overflow vulnerability in WEBP_Support.cpp in exempi 2.5.0 and earlier allows remote attackers to cause a denial of service via opening of crafted webp file.

    Published:Aug 22, 2023
    Last Modified:Nov 21, 2024
    EPS:Aug 22, 2023
    EPSS Score:0.01621
    CVSS Score:6.5

    Affected Products

    Vendor
    Exempi Project
    Product
    Exempi
    Vendor
    Redhat
    Product
    Enterprise Linux

    Exploits

    https://gitlab.freedesktop.org/libopenraw/exempi/issues/12https://gitlab.freedesktop.org/libopenraw/exempi/issues/12

    Common Weakness Enumeration

    CWE-787 Out-of-bounds Write

    Common Attack Pattern Enumeration and Classification (CAPEC)

    No CAPEC recorded yet

    Related CVEs

    CVE-2020-18651 (CVSS 6.5) — Buffer Overflow vulnerability in function ID3_Support::ID3v2Frame::getFrameValue in exempi 2.5.0 and earlier a…
    CVE-2018-12648 (CVSS 7.5) — The WEBP::GetLE32 function in XMPFiles/source/FormatSupport/WEBP_Support.hpp in Exempi 2.4.5 has a NULL pointe…
    CVE-2017-18238 (CVSS 5.5) — An issue was discovered in Exempi before 2.4.4. The TradQT_Manager::ParseCachedBoxes function in XMPFiles/sour…
    CVE-2018-7730 (CVSS 5.5) — An issue was discovered in Exempi through 2.4.4. A certain case of a 0xffffffff length is mishandled in XMPFil…
    CVE-2018-7731 (CVSS 5.5) — An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FormatSupport/WEBP_Support.cpp does not check…
    CVE-2018-7729 (CVSS 5.5) — An issue was discovered in Exempi through 2.4.4. There is a stack-based buffer over-read in the PostScript_Met…
    CVE-2018-7728 (CVSS 5.5) — An issue was discovered in Exempi through 2.4.4. XMPFiles/source/FileHandlers/TIFF_Handler.cpp mishandles a ca…
    CVE-2017-18236 (CVSS 5.5) — An issue was discovered in Exempi before 2.4.4. The ASF_Support::ReadHeaderObject function in XMPFiles/source/…
    CVE-2017-18233 (CVSS 5.5) — An issue was discovered in Exempi before 2.4.4. Integer overflow in the Chunk class in XMPFiles/source/FormatS…
    CVE-2017-18235 (CVSS 5.5) — An issue was discovered in Exempi before 2.4.3. The VPXChunk class in XMPFiles/source/FormatSupport/WEBP_Suppo…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High