AUGUST 4, 2026
Live Feed
Back to database
Case File

CVE-2020-36328

CRITICAL · CVSS 9.8 EPSS 2.66%

Source: NVD + CISA KEV + EPSS (historical backfill) · Published 2021-05-21 · Last synced 2026-08-04

CyberRota Analysis

This is a critical severity vulnerability with a CVSS score of 9.8. See the original NVD description below for full technical details.

CVE
CVE-2020-36328
Severity
CRITICAL
CVSS
9.8
EPSS
2.66%

Original NVD Description

A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid check for buffer size. The highest threat from this vulnerability is to data confidentiality and integrity as well as system availability.

Related CVEs

Other vulnerabilities affecting the same vendor(s)