Critical libwebp Vulnerability Under Active Exploitation
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2022-22706 | Unprivileged Memory-Write Flaw in Arm Mali GPU Kernel Drivers | 7.8 | 1% | KEV | KEV |
| CVE-2022-3038 | Use-After-Free in Chromium Network Service Affects Chrome, Edge, Opera | 8.8 | 25% | KEVPoC | KEV |
| CVE-2022-4262 | Type Confusion in Google Chrome V8 JavaScript Engine Exploited in the Wild (CVE-2022-4262) | 8.8 | 24% | KEV | KEV |
| CVE-2023-0266 | Use-After-Free in Linux Kernel ALSA PCM Enables Local Privilege Escalation | 7.0 | 4% | KEV | KEV |
| CVE-2023-26083 | Memory Leak Information Disclosure in Arm Mali GPU Kernel Drivers | 3.3 | 1% | KEV | KEV |
| CVE-2023-41064 | ImageIO Buffer Overflow in Apple iOS, iPadOS, and macOS Allows Code Execution | 7.8 | 53% | KEV | KEV |
| CVE-2023-4863 | Out-of-Bounds Write in Google Chromium WebP Image Codec Actively Exploited | 8.8 | 100% | KEVPoC ×4 | KEV |
| CVE-2023-5129 | Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority | — | — |
From the original article
2 min read at thehackernews.com
Google has assigned a new CVE identifier for a critical security flaw in the libwebp image library for rendering images in the WebP format that has come under active exploitation in the wild. Tracked as CVE-2023-5129 , the issue has been given the maximum severity score of 10. 0 on the CVSS rating system.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.