NVD - CVE-2023-4863
nvd.nist.gov

Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

  • Th3D3k0yEnglish
    15·
    3 years ago

    Current Description

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

    • cheese_greaterEnglish
      4·
      3 years ago

      By crafter webpage, does it mean it refers to anything like phishing or something a more savvy user wouldn’t likely “fall for” or does that actually not matter (zero-day or whatever)

      • FeathercrownEnglish
        9·
        3 years ago

        Looks like it can do RCE without user interaction other than visiting the page-- not good!