CVE-2018-25014

Name of the Vulnerable Software and Affected Versions libwebp versions prior to 1.0.1

Description The issue is related to the use of an uninitialized variable in the libwebp library, which is used for encoding and decoding WebP images. This could allow a remote attacker to execute arbitrary code. The problem is specifically found in the ReadSymbol() function.

Recommendations For libwebp versions prior to 1.0.1, update to version 1.0.1 or later to resolve the issue. As a temporary workaround, consider restricting the use of the ReadSymbol() function until a patch is available.