VYPR
← All advisories
Unrated severityNVD Advisory· Published May 21, 2021· Updated Aug 5, 2024

CVE-2018-25012

CVE-2018-25012

Description

A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

A heap-based buffer overflow in libwebp before 1.0.1 in GetLE24() can lead to out-of-bounds read via crafted VP8X chunk.

Vulnerability

A heap-based buffer overflow exists in libwebp versions before 1.0.1, specifically in the GetLE24() function. The issue resides in the muxread.c file when parsing the VP8X chunk without properly checking available size, leading to a read overflow. Affected versions include all releases prior to 1.0.1.

Exploitation

An attacker can exploit this vulnerability by supplying a crafted WebP file with a malformed VP8X chunk to any application that uses the libwebp library to parse WebP images. The attack requires no special privileges; user interaction may be required to open the malicious file.

Impact

Successful exploitation results in an out-of-bounds heap memory read, which can lead to information disclosure or potentially a crash (denial of service). The attacker can read beyond the allocated buffer, possibly leaking sensitive data.

Mitigation

The issue is fixed in libwebp version 1.0.1 with commit 95fd65070662e01cc9170c4444f5c0859a710097 [2]. Red Hat Enterprise Linux 8 addressed it via RHSA-2021:4231 [1]. Users should update to the patched version. No workaround is available other than applying the patch.

References
  1. 1956922 – (CVE-2018-25012) CVE-2018-25012 libwebp: out-of-bounds read in WebPMuxCreateInternal()
  2. 95fd65070662e01cc9170c4444f5c0859a710097 - webm/libwebp - Git at Google

AI Insight generated on May 26, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

36

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

3

News mentions

0

No linked articles in our index yet.