CVE-2023-41064

LibWebP vulnerability CVE-2023-41064 Code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP file an image format with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...

webp-CVE-2023-4863

libwebp CVE-2023-4863 A Vulnerability to Hack The World - CVE-2023-4863 Finding The .webp Vulnerability in 8s Fuzzing with AFL++...

CVE-2023-4683-Test

CVE-2023-4683-Test This repo holds an easy to use POC for CVE-2023-4683. Just git clone this repo and either extract webp-test or run setup-webp-test.sh. webp-test already has the necessary files git commit 7ba44f80f3b94fc0138db159afea770ef06532a0 of https://chromium.googlesource.com/webm/libwebp...

CVE-2023-4863

level 1: craft.c - bad.webp exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error: tiffio.h: No su...

libwebp-checker

中文 | EN CVE-2023-4863 libwebp dependency check tools This tool checks if your server's application or process that is affected by CVE-2023-4863 libwebp Heap buffer overflow Version above 0.5.0. Run this script in your production environment carefully. Result Screen Shot Scan Result Table of...

NotEnough

Huffman table hacking tool This tool calculates tricky canonical huffman histogram, which is able to trigger OOB Out Of Band write for vulnerable libwebp library i.e. libwebp = 1.3.1. This vulnerability is known as CVE-2023-4863 or CVE-2023-41064. We can overflow the pre-allocated huffman table b...

webp_Android10_r33_CVE-2023-1999

/ \/ / / / \ \ / / \ / \//// / / / \ \ / / / / / / / \ \ / \ /////v1.0.2 Description: WebP codec: library to encode and decode images in WebP format. This package contains the library that can be used in other programs to add WebP support, as well as the command line tools 'cwebp' and...

lab-cve-2023-4863

CVE-2023-4863 — libwebp Exploitation Lab Reproduction of CVE-2023-4863 heap buffer overflow in libwebp in a fully isolated automated Docker environment. Based on the practice from the Ethical Hacking module of CEFIRE. What this lab does Spins up eight containers on a private network: Container|...

cve-2023-4863-analysis

CVE-2023-4863 libwebp Training and Defense Analysis Project Advisor Information Full Name| GitHub| Email| LinkedIn| Website ---|---|---|---|--- Keyvan Arasteh| @keyvanarasteh| [email protected]| keyvanarasteh| qline.tech Student Information Full Name| Student ID ---|--- Batuhan Seydi Çelik| ...

vulnerabilidad-LibWebP-CVE-2023-41064

vulnerability-LibWebP-CVE-2023-41064 code lengths to trigger this vulnerability CVE-2023-41064 This is a Python script that creates an empty WebP an image format file with a specific header structure. The purpose of this script is to generate a WebP file that can be used for testing or educationa...

Astra Linux – Vulnerability in libwebp

A heap-based buffer overflow was discovered in libwebp in versions prior to 1.0.1 in the GetLE24 function...

Astra Linux – Vulnerability in libwebp

A flaw was discovered in libwebp in versions prior to 1.0.1. When reading a file, libwebp allocates an excessive amount of memory. The greatest threat posed by this vulnerability is related to service availability...

Astra Linux – Vulnerability in libwebp

An use of an uninitialized value was found in libwebp in versions before 1.0.1 in the ReadSymbol function...

CVE-2023-4863

CVE-2023-4863 checkout webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ checkout vulnerable version git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 enable AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix build webp make -f...

CVE-2026-110635

webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell...

EUVD-2026-101263

webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell...

CVE-2026-110635 webp-converter before 3.0.0 OS Command Injection via File Names and Options

webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell...

CLEANSTART-2024-ZN11059 Heap buffer overflow in libwebp in Google Chrome prior to 116

Security vulnerability affects the chromium package. Heap buffer overflow in libwebp in Google Chrome prior to 116...

Rocky Linux 8.6 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc Multiple Vulnerabilities (ciqsa-2026_0098)

The Rocky Linux 8.6 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ ciqsa-20260098 advisory. This advisory aggregates security fixes for the libwebp SRPM in CIQ LTS 8.6. It addresses 2 CVEs: CVE-2023-4863, CVE-2016-9085. Tenable has extracted the...

Rocky Linux 8 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel (crlsa-2023_5309)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235309 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...