CVE-2018-25011

CVE-2018-25011 is a critical heap-based buffer overflow vulnerability (CWE-787) in the PutLE16() function of libwebp versions prior to 1.0.1, affecting products like Red Hat Enterprise Linux and WebMProject libwebp. With a CVSS score of 9.8, it presents a severe risk due to its network-based attack vector, low attack complexity, and potential for complete compromise of confidentiality, integrity, and availability. While no active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB) has been identified, the vulnerability has garnered some community discussion and media coverage, indicating awareness despite its inactive status on the Hot List and absence from the KEV catalog.