A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE24().
CVSS Metrics