Tag

libwebp-vulnerability

Safeguard articles tagged "libwebp-vulnerability" — guides, analysis, and best practices for software supply chain and application security.

1 article

Vulnerabilities

libwebp and CVE-2023-4863: The Full Story

A heap buffer overflow in libwebp's lossless decoder, exploited in the wild before a patch existed, turned out to affect far more software than the browser it was first reported in.

Jan 24, 20245 min read