CVE-2023-4863

CVE-2023-4863 получение webp git clone https://chromium.googlesource.com/webm/libwebp/ webptest cd webptest/ переключение на уязвимую версию git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0 включение AddressSanitizer sed -i 's/^EXTRAFLAGS=./& -fsanitize=address/' makefile.unix сборка webp ma...

NotEnough

Outil de piratage de table de Huffman Cet outil calcule un histogramme Huffman canonique délicat, capable de déclencher une écriture hors limites OOB pour la bibliothèque libwebp vulnérable i.e. libwebp = 1.3.1. Cette vulnérabilité est connue sous le nom de CVE-2023-4863 ou CVE-2023-41064. Nous...

CVE-2023-4863

niveau 1 : craft.c - bad.webp exist: docker 813b6b757038 /webp cd CVE-2023-4863 make -f makefile.unix -B fatal error: jpeglib.h: No such file or directory apt-get update apt-get install libjpeg-dev fatal error: png.h: No such file or directory apt-get install libpng-dev fatal error: tiffio.h: No...

CVE-2023-4683-Test

CVE-2023-4683-Test Ce dépôt contient un POC facile à utiliser pour CVE-2023-4683. Il suffit de cloner ce dépôt avec git, puis d'extraire webp-test ou d'exécuter setup-webp-test.sh. webp-test contient déjà les fichiers nécessaires commit git 7ba44f80f3b94fc0138db159afea770ef06532a0 de...

webp-CVE-2023-4863

libwebp CVE-2023-4863 Une vulnérabilité pour pirater le monde - CVE-2023-4863 Trouver la vulnérabilité .webp en 8s Fuzzing avec AFL++...

Rocky Linux 9 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc (crlsa-2023_2078)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232078 advisory. Mozilla: libwebp: Double-free in libwebp CVE-2023-1999 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Ness...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource (crlsa-2023_5201)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235201 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: firefox / firefox-debuginfo / firefox-debugsource (crlsa-2023_5184)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235184 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_1802)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231802 advisory. Thunderbird: Revocation status of S/Mime recipient certificates was not checked CVE-2023-0547 Mozilla: Matrix SDK bundled with Thunderbird vulnerable to...

Rocky Linux 8 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel Multiple Vulnerabilities (crlsa-2021_2354)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20212354 advisory. libwebp: heap-based buffer overflow in PutLE16 CVE-2018-25011 libwebp: heap-based buffer overflow in WebPDecodeInto functions CVE-2020-36328 libwebp:...

Rocky Linux 8.6 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc (ciqsa-2026_0951)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260951 advisory. This advisory aggregates security fixes for the libwebp SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-1999. Tenable has extracted the preceding description...

Rocky Linux 8.6 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc (ciqsa-2026_0098)

The Rocky Linux 8.6 host has packages installed that are affected by a vulnerability as referenced in the CIQ ciqsa-20260098 advisory. This advisory aggregates security fixes for the libwebp SRPM in CIQ LTS 8.6. It addresses 1 CVE: CVE-2023-4863. Tenable has extracted the preceding description...

Rocky Linux 9 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel / etc (crlsa-2023_5214)

The Rocky Linux 9 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235214 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

Rocky Linux 8 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel (crlsa-2023_5309)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20235309 advisory. libwebp: Heap buffer overflow in WebP Codec CVE-2023-4863 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that...

CentOS Linux 8 [TuxCare] Security Update: libwebp / libwebp-devel / libwebp-java / libwebp-tools Multiple Vulnerabilities (CENTOS-STREAM8:CLSA-2026:1776421961)

The CentOS Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS-STREAM8:CLSA-2026:1776421961 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in ShiftBytes. CVE-2018-25013 - A use of uninitializ...

Rocky Linux 8 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel (crlsa-2023_2076)

The Rocky Linux 8 host has packages installed that are affected by a vulnerability as referenced in the CIQ crlsa-20232076 advisory. Mozilla: libwebp: Double-free in libwebp CVE-2023-1999 Tenable has extracted the preceding description block directly from the CIQ security advisory. Note that Ness...

Rocky Linux 8 [CIQ] Security Update: libwebp / libwebp-debuginfo / libwebp-debugsource / libwebp-devel Multiple Vulnerabilities (crlsa-2021_4231)

The Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20214231 advisory. libwebp: out-of-bounds read in WebPMuxCreateInternal CVE-2018-25009 libwebp: out-of-bounds read in ApplyFilter CVE-2018-25010 libwebp: out-of-bounds read i...

CentOS Linux 6 [TuxCare] Security Update: libwebp / libwebp-devel / libwebp-java / libwebp-tools (CENTOS6:CLSA-2025:1758645375)

The CentOS Linux 6 host has packages installed that are affected by a vulnerability as referenced in the TuxCare CENTOS6:CLSA-2025:1758645375 advisory. - A flaw was found in libwebp in versions before 1.0.1. A heap-based buffer overflow in function WebPDecodeRGBInto is possible due to an invalid...

CentOS Linux 6 [TuxCare] Security Update: libwebp / libwebp-devel / libwebp-java / libwebp-tools Multiple Vulnerabilities (CENTOS6:CLSA-2026:1777974224)

The CentOS Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the TuxCare CENTOS6:CLSA-2026:1777974224 advisory. - A heap-based buffer overflow was found in libwebp in versions before 1.0.1 in GetLE16. CVE-2018-25009 - A heap-based buffer overflow w...

Rocky Linux 9 [CIQ] Security Update: thunderbird / thunderbird-debuginfo / thunderbird-debugsource Multiple Vulnerabilities (crlsa-2023_1809)

The Rocky Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the CIQ crlsa-20231809 advisory. Thunderbird: Revocation status of S/Mime recipient certificates was not checked CVE-2023-0547 Mozilla: Matrix SDK bundled with Thunderbird vulnerable to...