A flaw was found in libwebp in versions before 1.0.1 in the way it read the contents of a file without limiting memory allocation.
This issue has been addressed in the following products:
Red Hat Enterprise Linux 8
Via RHSA-2021:4231 https://access.redhat.com/errata/RHSA-2021:4231
This bug is now closed. Further updates for individual products will be reflected on the CVE page(s):