CVE:CVE-2018-25011
CNNVD:CNNVD-202105-1374
libwebp是一个WebP图像格式的编码和解码库。
libwebp 1.0.1之前的版本存在缓冲区错误漏洞。该漏洞源于PutLE16()中存在基于堆的缓冲区溢出，从而威胁数据机密性和完整性以及系统可用性。
solution:Upgrade webmproject libwebp to a higher version than 1.0.1,and avoid the version (,1.0.1); Upgrade redhat enterprise_linux to a higher version than 7.0,8.0,and avoid the version 7.0,8.0