Skip to content

Product

crates.io libwebp-sys vulnerabilities

2 published CVES affecting crates.io libwebp-sys, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
2
Critical
0
High
2
Medium
0
Low
0
Unscored
0
CISA KEV
1

Latest crates.io libwebp-sys CVEs

Newest publication first

  1. CVE-2023-4863 libwebp: OOB write in BuildHuffmanTable

    Published
    HighCVSS 8.8 EPSS 100.0% CISA KEV added 2023-09-13 Exploited in the wild

    Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

  2. GHSA-j7hp-h8jx-5ppr libwebp: OOB write in BuildHuffmanTable

    Published
    HighCVSS 8.8

    Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild. libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable".

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.