828 matches found
Microsoft’s Response to Open-Source Vulnerabilities - CVE-2023-4863 and CVE-2023-5217
Microsoft is aware and has released patches associated with the two Open-Source Software security vulnerabilities, CVE-2023-4863 and CVE-2023-5217. Through our investigation, we found that these affect a subset of our products and as of today, we have addressed them in our products as outlined...
ASB-A-299477569
In BuildHuffmanTable of huffmanutils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation...
Heap Buffer Overflow
napi-rs/image is vulnerable to Heap Buffer Overflow. The vulnerability is due to a remote attacker's ability to perform an out-of-bounds memory write via a crafted webp image resulting in Denial of Service or Code Execution under special circumstances...
Exploit for NULL Pointer Dereference in Gpac
CVE-2023-4683-Test This repo holds an easy to use POC for CVE...
@dweb-browser/desktop (0.1.2), @dweb-browser/js-process (0.1.2) +28 more potentially affected by CVE-2023-5217 via electron (>=25.0.0-beta.1, <=25.8.1)
electron NPM version =25.0.0-beta.1, =8.0.0, =1.0.0, =1.0.0, =0.6.0, =0.0.22, =0.0.93, =0.0.95 - firedev 16.444.5 - firedev-class-helpers 16.444.4 - firedev-config 16.444.4 - firedev-core 16.444.5 - firedev-logger 16.444.4 - firedev-rest 16.444.3 and more Source cves: CVE-2023-5217 Source advisor...
WebM Project WebP Image Library Installed (Linux)
Binary data webmprojectwebpimagelibrarynixinstalled.nbin...
WebM Project WebP Image Library (libwebp) < 1.3.2 Vulnerability
The version of WebM Project WebP Image Library libwebp installed on the remote host is prior to 1.3.2. It is, therefore, affected by a vulnerability: - Heap buffer overflow in libwebp prior to libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a specially crafted...
Imageflow affected by libwebp zero-day and should not be used with malicious source images.
Impact This vulnerability affects deployments of Imageflow that involve decoding or processing malicious source .webp files. If you only process your own trusted files, this should not affect you but you should update anyway. Imageflow relies on Google's libwebp library to decode .webp images, an...
GHSA-7VPR-3PPW-QRPJ Imageflow affected by libwebp zero-day and should not be used with malicious source images.
Impact This vulnerability affects deployments of Imageflow that involve decoding or processing malicious source .webp files. If you only process your own trusted files, this should not affect you but you should update anyway. Imageflow relies on Google's libwebp library to decode .webp images, an...
GHSA-4VJR-CRVH-383H @napi-rs/image affected by libwebp CVE
Impact Heap buffer overflow in libwebp allows a remote attacker to perform an out of bounds memory write via a crafted webp image. References - https://github.com/advisories/GHSA-j7hp-h8jx-5ppr - https://blog.isosceles.com/the-webp-0day/...
@napi-rs/image affected by libwebp CVE
Impact Heap buffer overflow in libwebp allows a remote attacker to perform an out of bounds memory write via a crafted webp image. References - https://github.com/advisories/GHSA-j7hp-h8jx-5ppr - https://blog.isosceles.com/the-webp-0day/...
Pegasus spyware and how it exploited a WebP vulnerability
Recent events have demonstrated very clearly just how persistent and wide-spread the Pegasus spyware is. For those that have missed the subtle clues, we have tried to construct a clear picture. We attempted to follow the timeline of events, but have made some adjustments to keep the flow of the...
Google libwebp open source library remote code execution vulnerability
WebP is an image format developed by Google, which supports lossy and lossless compression of network images, and its compression effect and speed have certain advantages over PNG and JPEG formats. libwebp is a C/C++ open source library that implements the coding and decoding of the WebP image...
PT-2023-32977 · Google · Libwebp
Name of the Vulnerable Software and Affected Versions: libwebp affected versions not specified Description: A heap buffer overflow issue in libwebp allows a remote attacker to perform an out-of-bounds memory write via a crafted webp image. Recommendations: At the moment, there is no information...
RLSA-2023:5309 Important: libwebp security update
The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format RIFF. Webmasters, web...
libwebp security update
An update is available for libwebp. This update affects Rocky Linux 8. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from the CVE list The libwebp packages provide a library and tools for the WebP graphics format...
Debian dla-3585 : exempi - security update
The remote Debian 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the dla-3585 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-3585-1 [email protected]...
Stable Channel Update for ChromeOS / ChromeOS Flex
The Stable channel is being updated to OS version: 15572.50.0 Browser version: 117.0.5938.115 for most ChromeOS devices. If you find new issues, please let us know one of the following ways 1. File a bug 2. Visit our ChromeOS communities 1. General: Chromebook Help Community 2. Beta Specific:...
