CVE-2018-25014
libwebp6: A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
CVE-2018-25014 is fixed in 6 products on 1 platform, first by libwebp6 0.6.1-2ubuntu0.18.04.1, released December 30, 2020. It is not reported as exploited. Patch Radar priority: High.
High
CVSS
9.8
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0223
82nd percentile
A use of uninitialized value was found in libwebp in versions before 1.0.1 in ReadSymbol().
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| libwebp · RHEL 8 | 0:1.0.0-5.el8 | RHSA-2021:4231 | Nov 9, 2021 |
| libwebp · almalinux 8 | 1.0.0-5.el8 | ALSA-2021:4231 | Nov 9, 2021 |
| libwebp · ol 8 | 0:1.0.0-5.el8 | ELSA-2021-4231 | Nov 16, 2021 |
| libwebp · rocky 8 | 0:1.0.0-5.el8 | RLSA-2021:4231 | Nov 9, 2021 |
| libwebp-devel · RHEL 8 | 0:1.0.0-5.el8 | RHSA-2021:4231 | Nov 9, 2021 |
| libwebp-devel · almalinux 8 | 1.0.0-5.el8 | ALSA-2021:4231 | Nov 9, 2021 |
| libwebp-devel · ol 8 | 0:1.0.0-5.el8 | ELSA-2021-4231 | Nov 16, 2021 |
| libwebp6 · Ubuntu 18.04.6 LTS (bionic) | 0.6.1-2ubuntu0.18.04.1 | libwebp6 0.6.1-2ubuntu0.18.04.1 | Dec 30, 2020 |
| libwebp6 · Ubuntu 20.04 LTS (focal) | 0.6.1-2ubuntu0.20.04.1 | libwebp6 0.6.1-2ubuntu0.20.04.1 | Dec 30, 2020 |
| libwebpdemux2 · Ubuntu 18.04.6 LTS (bionic) | 0.6.1-2ubuntu0.18.04.1 | libwebpdemux2 0.6.1-2ubuntu0.18.04.1 | Dec 30, 2020 |
| libwebpdemux2 · Ubuntu 20.04 LTS (focal) | 0.6.1-2ubuntu0.20.04.1 | libwebpdemux2 0.6.1-2ubuntu0.20.04.1 | Dec 30, 2020 |
| libwebpmux3 · Ubuntu 18.04.6 LTS (bionic) | 0.6.1-2ubuntu0.18.04.1 | libwebpmux3 0.6.1-2ubuntu0.18.04.1 | Dec 30, 2020 |
| libwebpmux3 · Ubuntu 20.04 LTS (focal) | 0.6.1-2ubuntu0.20.04.1 | libwebpmux3 0.6.1-2ubuntu0.20.04.1 | Dec 30, 2020 |
| webp · Ubuntu 18.04.6 LTS (bionic) | 0.6.1-2ubuntu0.18.04.1 | webp 0.6.1-2ubuntu0.18.04.1 | Dec 30, 2020 |
| webp · Ubuntu 20.04 LTS (focal) | 0.6.1-2ubuntu0.20.04.1 | webp 0.6.1-2ubuntu0.20.04.1 | Dec 30, 2020 |