CVE-2016-9085: Fedoraproject Fedora

Low severity, CVSS 3.3. EPSS: 0.4% chance of exploitation in the next 30 days.

Multiple integer overflows in libwebp allows attackers to have unspecified impact via unknown vectors.

Affected products

• Fedoraproject Fedora: version 24 only; version 25 only
• Webmproject Libwebp: up to and including 0.5.2

Published 2017-02-03. Last modified 2026-06-17.