Summary
It was discovered that Firefox did not properly manage memory when handling
WebP images. If a user were tricked into opening a webpage containing
malicious WebP image file, an attacker could potentially exploit these to
cause a denial of service or execute arbitrary code. (CVE-2023-4863)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | firefox | 117.0.1+build2-0ubuntu0.20.04.1 |
Vulnerabilities 1
-
High 8.8
libwebp: OOB write in BuildHuffmanTable
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
KEV Sep 13, 2023
References
-
report
https://ubuntu.com/security/CVE-2023-4863