Lucene search
+L

1042 matches found

Cvelist
Cvelist
added 2023/09/12 2:24 p.m.55 views

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

9AI score0.99735EPSS
SaveExploits9References45
CVE
CVE
added 2023/09/12 2:24 p.m.1628 views

CVE-2023-4863

CVE-2023-4863 describes a heap buffer overflow in libwebp used by Google Chrome prior to 116.0.5845.187 and in libwebp 1.3.2. A remote attacker can cause an out-of-bounds memory write by presenting a crafted HTML page. The vulnerability is exploitable over the network and requires user interactio...

8.8CVSS8.5AI score0.99735EPSS
SaveIn wildExploits9References47Affected Software1
AlpineLinux
AlpineLinux
added 2023/09/12 2:24 p.m.297 views

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS8.8AI score0.99735EPSS
SaveExploits9
Debian CVE
Debian CVE
added 2023/09/12 2:24 p.m.46 views

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS8.2AI score0.99735EPSS
SaveExploits9
RustSec
RustSec
added 2023/09/12 12:0 p.m.13 views

libwebp: OOB write in BuildHuffmanTable

Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild. libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable"...

8.8CVSS9.8AI score0.99735EPSS
SaveExploits9Affected Software1
OSV
OSV
added 2023/09/12 12:0 p.m.39 views

RUSTSEC-2023-0060 libwebp: OOB write in BuildHuffmanTable

Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild. libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable"...

8.8CVSS7.5AI score0.99735EPSS
SaveExploits9References2
OSV
OSV
added 2023/09/12 12:0 p.m.35 views

RUSTSEC-2023-0061 libwebp: OOB write in BuildHuffmanTable

Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild. libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable"...

8.8CVSS7.5AI score0.99735EPSS
SaveExploits9References2
RustSec
RustSec
added 2023/09/12 12:0 p.m.14 views

libwebp: OOB write in BuildHuffmanTable

Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild. libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable"...

8.8CVSS9.7AI score0.99735EPSS
SaveExploits9Affected Software1
UbuntuCve
UbuntuCve
added 2023/09/12 12:0 a.m.69 views

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical...

8.8CVSS7.2AI score0.99735EPSS
SaveExploits9References10
FreeBSD
FreeBSD
added 2023/09/12 12:0 a.m.54 views

libwebp heap buffer overflow

[email protected] reports: Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical The Tor browser is based on Firefox and GeckoView and uses al...

8.8CVSS8.5AI score0.99735EPSS
SaveExploits9References1
Positive Technologies
Positive Technologies
added 2023/09/12 12:0 a.m.6 views

PT-2023-31783

Name of the Vulnerable Software and Affected Versions libwebp versions 0.5.0 through 1.3.1 Description A critical vulnerability has been identified in the libwebp image library, which can be exploited by a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. The...

9.6CVSS6.7AI score
SaveExploits5References252
ATTACKERKB
ATTACKERKB
added 2023/09/12 12:0 a.m.58 views

CVE-2023-4863

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. Chromium security severity: Critical Recent assessments: Assessed Attacker Value: 0 Assessed Attacker Value:...

8.8CVSS8.5AI score0.99735EPSS
SaveIn wildExploits9References46
Snyk
Snyk
added 2023/09/11 9:0 p.m.10 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow when the ReadHuffmanCodes function is used. An attacker can craft a special WebP lossless file that triggers the ReadHuffmanCodes function to allocate the HuffmanCode buffer with a size that comes from an arra...

9.6CVSS9.2AI score0.99735EPSS
SaveExploits9References3
Snyk
Snyk
added 2023/09/11 9:0 p.m.6 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow when the ReadHuffmanCodes function is used. An attacker can craft a special WebP lossless file that triggers the ReadHuffmanCodes function to allocate the HuffmanCode buffer with a size that comes from an arra...

9.6CVSS7.2AI score0.99735EPSS
SaveExploits9References3
Snyk
Snyk
added 2023/09/11 9:0 p.m.2 views

Heap-based Buffer Overflow

Overview Affected versions of this package are vulnerable to Heap-based Buffer Overflow when the ReadHuffmanCodes function is used. An attacker can craft a special WebP lossless file that triggers the ReadHuffmanCodes function to allocate the HuffmanCode buffer with a size that comes from an arra...

9.6CVSS7.2AI score0.99735EPSS
SaveExploits9References3
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.13 views

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2730)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.4AI score0.00952EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/09/11 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2761)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.4AI score0.00952EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/09/05 12:0 a.m.12 views

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2653)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.4AI score0.00952EPSS
SaveExploits0References2
OpenVAS
OpenVAS
added 2023/09/05 12:0 a.m.14 views

Huawei EulerOS: Security Advisory for libwebp (EulerOS-SA-2023-2695)

The remote host is missing an update for the Huawei EulerOS SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

7.5CVSS8.4AI score0.00952EPSS
SaveExploits0References2
Tenable Nessus
Tenable Nessus
added 2023/08/08 12:0 a.m.22 views

EulerOS 2.0 SP9 : libwebp (EulerOS-SA-2023-2588)

According to the versions of the libwebp package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode function and loop through to free best.bw an...

7.5CVSS7.3AI score0.00952EPSS
SaveExploits0References2
Rows per page
Query Builder