https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863 A heap overflow in libwebp's lossless decoder, found by Apple SEAR and Citizen Lab after the BLASTPASS iPhone exploit, was exploited in the wild. Because libwebp is everywhere, browsers, Electron apps and image libraries that bundle it all had to ship updates. en Wed, 13 Sep 2023 00:00:00 GMT https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863 https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863#2023-09-13-eef82daa Wed, 13 Sep 2023 00:00:00 GMT high <p>libwebp heap overflow exploited in the wild (CVE-2023-4863): CISA adds CVE-2023-4863 to the KEV catalog</p> https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863 https://pwn.watch/i/libwebp-heap-overflow-cve-2023-4863#2023-09-11-ad1ed62a Mon, 11 Sep 2023 00:00:00 GMT high <p><a href="https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html">Source</a></p>