CVE:CVE-2020-36331
CNNVD:CNNVD-202105-1382
libwebp是一个WebP图像格式的编码和解码库。
libwebp 1.0.1之前的版本存在缓冲区错误漏洞，该漏洞源于在函数ChunkAssignData中存在读取越界。此漏洞的最大威胁是数据机密性和服务可用性。
solution:Upgrade webmproject libwebp to a higher version than 1.0.1,and avoid the version (,1.0.1); Upgrade redhat enterprise_linux to a higher version than 8.0,and avoid the version 8.0; Upgrade netapp ontap_select_deploy_administration_utility to a higher version than -; Upgrade debian debian_linux to a higher version than 9.0,10.0,and avoid the version 9.0,10.0; Upgrade apple ipados to a higher version than 14.7,and avoid the version (,14.7); Upgrade apple iphone_os to a higher version than 14.7,and avoid the version (,14.7)