A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16().
CVSS Metrics
