Double Free Affecting libwebp package, versions >=0.4.2, <1.3.1
Threat Intelligence
EPSS
0.13% (48th
percentile)
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk ID SNYK-COCOAPODS-LIBWEBP-5489511
- published 30 Apr 2023
- disclosed 11 Apr 2023
- credit Irvan Kurniawan
Introduced: 11 Apr 2023
CVE-2023-1999 Open this link in a new tabHow to fix?
Upgrade libwebp to version 1.3.1 or higher.
Overview
libwebp is a Library to encode and decode images in WebP format.
Affected versions of this package are vulnerable to Double Free which can lead to memory corruption and a potentially exploitable crash.
CVSS Scores
version 3.1