High 1 exploited CVE ELSA-2023-5214 1 CVE

Important: libwebp security update (Oracle Linux 9)

Published Sep 19, 2023 · Updated Sep 19, 2023

Ecosystem: Oracle Linux

Summary

[1.2.0-7]
- Added fix for CVE-2023-4863

Fixed packages 3

Release	Package	Fixed in
Oracle Linux · 9	libwebp	0:1.2.0-7.el9_2
Oracle Linux · 9	libwebp-devel	0:1.2.0-7.el9_2
Oracle Linux · 9	libwebp-tools	0:1.2.0-7.el9_2

Vulnerabilities 1

High 8.8

CVE-2023-4863 Exploited Public exploit EPSS 100%

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Google Chrome libwebp chromium Browsers Debian Ubuntu Azure Linux Alpine Wolfi npm PyPI Go crates.io NuGet

Sep 12, 2023
KEV Sep 13, 2023