Wind River Support Network

HomeDefectsLIN10-8646

Fixed

LIN10-8646 : Security Advisory - libwebp - CVE-2018-25014

Created: May 23, 2021 Updated: Nov 18, 2022

Resolved Date: Nov 18, 2022

Found In Version: 10.17.41.1

Fix Version: 10.17.41.24

Severity: Standard

Applicable for: Wind River Linux LTS 17

Component/s: Userspace

Description

A flaw was found in libwebp in versions before 1.0.1. An unitialized variable is used in function ReadSymbol. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

CREATE(Triage):(User=admin) CVE-2018-25014 (https://nvd.nist.gov/vuln/detail/CVE-2018-25014)

CVEs

CVE-2018-25014