CVE-2018-25011: 
NixOS vulnerability analysis and mitigation

A heap-based buffer overflow vulnerability was discovered in libwebp versions prior to 1.0.1, specifically in the PutLE16() function. The vulnerability was identified and tracked as CVE-2018-25011, with the initial record being created on May 4, 2021. LibWebP is a widely-used library for encoding and decoding WebP image format (CVE Mitre, NVD).

The vulnerability is classified as a heap-based buffer overflow occurring in the PutLE16() function of libwebp. The issue was discovered through the OSS-Fuzz project and was documented in the project's issue tracking system (Chromium Issue). The vulnerability affects all versions of libwebp before version 1.0.1.

The vulnerability could potentially lead to memory corruption due to the heap-based buffer overflow. This type of vulnerability typically poses risks to data integrity and could potentially lead to program crashes or arbitrary code execution (Red Hat Bugzilla).

The vulnerability was addressed in libwebp version 1.0.1, released on November 2, 2018. The fix was part of a larger security hardening effort that addressed multiple security-related issues. Users are advised to upgrade to libwebp version 1.0.1 or later to resolve this vulnerability (Chromium Release).