CVE-2016-9085

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

• CWE-190

• http://www.openwall.com/lists/oss-security/2016/10/27/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93928Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1389338Issue Tracking, Patch, Third Party Advisory
• https://chromium.googlesource.com/webm/libwebp/+/e2affacc35f1df6cc3b1a9fa0ceff5ce2d0cce83Issue Tracking, Patch, Third Party Advisory
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LG5Q42J7EJDKQKWTTHCO4YZMOMP74YPQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTR2ZW67TMT7KC24RBENIF25KWUJ7VPD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SH6X3MWD5AHZC5JT4625PGFHAYLR7YW7/
• https://security.gentoo.org/glsa/201701-61Third Party Advisory, VDB Entry
• http://www.openwall.com/lists/oss-security/2016/10/27/3Mailing List, Patch, Third Party Advisory
• http://www.securityfocus.com/bid/93928Third Party Advisory, VDB Entry
• https://bugzilla.redhat.com/show_bug.cgi?id=1389338Issue Tracking, Patch, Third Party Advisory
• https://chromium.googlesource.com/webm/libwebp/+/e2affacc35f1df6cc3b1a9fa0ceff5ce2d0cce83Issue Tracking, Patch, Third Party Advisory
• https://lists.apache.org/thread.html/rf9fa47ab66495c78bb4120b0754dd9531ca2ff0430f6685ac9b07772%40%3Cdev.mina.apache.org%3E
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/LG5Q42J7EJDKQKWTTHCO4YZMOMP74YPQ/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PTR2ZW67TMT7KC24RBENIF25KWUJ7VPD/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/SH6X3MWD5AHZC5JT4625PGFHAYLR7YW7/
• https://security.gentoo.org/glsa/201701-61Third Party Advisory, VDB Entry

Published

Feb 3, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-9079A use-after-free vulnerability in SVG Animation has been dis…7.5
• CVE-2016-9080Memory safety bugs were reported in Firefox 50.0.2. Some of …
• CVE-2016-9081Joomla! 3.4.4 through 3.6.3 allows attackers to reset userna…
• CVE-2016-9082Integer overflow in the write_png function in cairo 1.14.6 a…
• CVE-2016-9083drivers/vfio/pci/vfio_pci.c in the Linux kernel through 4.8.…7.8
• CVE-2016-9084drivers/vfio/pci/vfio_pci_intrs.c in the Linux kernel throug…
• CVE-2016-9086GitLab versions 8.9.x and above contain a critical security …
• CVE-2016-9087SQL injection vulnerability in framework/modules/filedownloa…
• CVE-2016-9091Blue Coat Advanced Secure Gateway (ASG) 6.6 before 6.6.5.4 a…
• CVE-2016-9092The Symantec Content Analysis (CA) 1.3, 2.x prior to 2.2.1.1…
• CVE-2016-9093A version of the SymEvent Driver that shipped with Symantec …
• CVE-2016-9094Symantec Endpoint Protection clients place detected malware …