Google Inc libwebp

Name: Google Inc libwebp
Brand: Google Inc

productRU

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

by severity

10critical4high0medium0low

updated 2026-10-27

vulnerabilities (14)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2023-4863US	high8.8OT critical	100.0% (100th)	KEV	no fix	2023-09-12	≤ 1.3.2
CVE-2023-5217US	high8.8OT critical	49.0% (99th)	KEV	no fix	2023-09-28	≤ 1.13.1
CVE-2023-1999US	high7.5	0.95% (61st)	Exploit	no fix	2023-06-20	5 versions
CVE-2020-36328US	critical9.8	2.66% (86th)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2018-25011US	critical9.8	2.51% (85th)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2020-36329US	critical9.8	2.32% (83rd)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2020-36331US	critical9.1	2.30% (83rd)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2018-25010US	critical9.1	2.23% (83rd)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2018-25014US	critical9.8	2.23% (83rd)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2020-36330US	critical9.1	2.23% (83rd)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2018-25009US	critical9.1	2.10% (82nd)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2018-25013US	critical9.1	2.05% (81st)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2018-25012US	critical9.1	2.05% (81st)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2
CVE-2020-36332US	high7.5	1.97% (80th)	—	no fix	2021-05-21	0.1.2 → 1.0.1 rc2

The flaw types (CWEs) most of these CVEs share.

CWE-125Out-of-bounds Read7 CVEs
CWE-122Heap-based Buffer Overflow4 CVEs
CWE-787Out-of-bounds Write4 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer2 CVEs
CWE-416Use After Free2 CVEs
CWE-20Improper Input Validation1 CVEs
CWE-400Uncontrolled Resource Consumption1 CVEs
CWE-415Double Free1 CVEs

Which sources assert this record, and when.

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.