CVE-2023-1999 — Use after free in libwebp

Description (CNA)

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.

Affected (CNA)

Vendor / product	Versions
Chromium / libwebp	affected 0.4.2 before 1.3.1; affected 0.4.2 before 1.3.0-8-ga486d800

CWE

CWE-416

References

https://chromium.googlesource.com/webm/libwebp
https://security.gentoo.org/glsa/202309-05

ADP enrichment

CVE

No English description supplied.

https://chromium.googlesource.com/webm/libwebp
https://security.gentoo.org/glsa/202309-05

CISA-ADP

No English description supplied.

No references supplied.