OSV-2021-900

    Dashboard / Vulnerabilities / OSV-2021-900

    OSV-2021-900

    Published: 27 Jun 2021Last Modified: 13 Apr 2022

    Summary: Negative-size-param in WebPRescalerInit

    Details: OSS-Fuzz report: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35583 ``` Crash type: Negative-size-param Crash state: WebPRescalerInit AllocateAndInitRescaler VP8LDecodeImage ```

    References: https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=35583

    Affected packages

    Package

    Name: libwebp

    Purl: pkg:generic/libwebp

    Affected ranges

    Type: GIT

    Events:

    Introduced- b60d4603187e0ef0da6520c34d5ac03b142dbecf
    Fixed -277d30749f15d3fd99649c9347867ddc2fe4f32e

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    OSV-2021-900 | CVE-DB