CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6406

The function ParseVP9SuperFrameIndex in common/libwebm_util.cc in libwebm through 2018-01-30 does not validate the child_frame_length data obtained from a .webm file, which allows remote attackers to cause an information leak or a denial of service (heap-based buffer over-read and later out-of-bounds write), or possibly have unspecified other impact.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 61.7%

CVSS Severity

CVSS v3 Score 8.8

CVSS v2 Score 6.8

References

Products affected by CVE-2018-6406

Webmproject » Libwebm » Version: 1.0.0.10

cpe:2.3:a:webmproject:libwebm:1.0.0.10
Webmproject » Libwebm » Version: 1.0.0.11

cpe:2.3:a:webmproject:libwebm:1.0.0.11
Webmproject » Libwebm » Version: 1.0.0.12

cpe:2.3:a:webmproject:libwebm:1.0.0.12
Webmproject » Libwebm » Version: 1.0.0.13

cpe:2.3:a:webmproject:libwebm:1.0.0.13
Webmproject » Libwebm » Version: 1.0.0.14

cpe:2.3:a:webmproject:libwebm:1.0.0.14
Webmproject » Libwebm » Version: 1.0.0.15

cpe:2.3:a:webmproject:libwebm:1.0.0.15
Webmproject » Libwebm » Version: 1.0.0.16

cpe:2.3:a:webmproject:libwebm:1.0.0.16
Webmproject » Libwebm » Version: 1.0.0.17

cpe:2.3:a:webmproject:libwebm:1.0.0.17
Webmproject » Libwebm » Version: 1.0.0.18

cpe:2.3:a:webmproject:libwebm:1.0.0.18
Webmproject » Libwebm » Version: 1.0.0.19

cpe:2.3:a:webmproject:libwebm:1.0.0.19
Webmproject » Libwebm » Version: 1.0.0.2

cpe:2.3:a:webmproject:libwebm:1.0.0.2
Webmproject » Libwebm » Version: 1.0.0.20

cpe:2.3:a:webmproject:libwebm:1.0.0.20
Webmproject » Libwebm » Version: 1.0.0.21

cpe:2.3:a:webmproject:libwebm:1.0.0.21
Webmproject » Libwebm » Version: 1.0.0.22

cpe:2.3:a:webmproject:libwebm:1.0.0.22
Webmproject » Libwebm » Version: 1.0.0.23

cpe:2.3:a:webmproject:libwebm:1.0.0.23
Webmproject » Libwebm » Version: 1.0.0.24

cpe:2.3:a:webmproject:libwebm:1.0.0.24
Webmproject » Libwebm » Version: 1.0.0.25

cpe:2.3:a:webmproject:libwebm:1.0.0.25
Webmproject » Libwebm » Version: 1.0.0.26

cpe:2.3:a:webmproject:libwebm:1.0.0.26
Webmproject » Libwebm » Version: 1.0.0.27

cpe:2.3:a:webmproject:libwebm:1.0.0.27
Webmproject » Libwebm » Version: 1.0.0.3

cpe:2.3:a:webmproject:libwebm:1.0.0.3
Webmproject » Libwebm » Version: 1.0.0.4

cpe:2.3:a:webmproject:libwebm:1.0.0.4
Webmproject » Libwebm » Version: 1.0.0.5

cpe:2.3:a:webmproject:libwebm:1.0.0.5
Webmproject » Libwebm » Version: 1.0.0.6

cpe:2.3:a:webmproject:libwebm:1.0.0.6
Webmproject » Libwebm » Version: 1.0.0.7

cpe:2.3:a:webmproject:libwebm:1.0.0.7
Webmproject » Libwebm » Version: 1.0.0.8

cpe:2.3:a:webmproject:libwebm:1.0.0.8
Webmproject » Libwebm » Version: 1.0.0.9

cpe:2.3:a:webmproject:libwebm:1.0.0.9

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-6406

Products

Pricing

Contact Us