libwebp
Security incidents tagged libwebp. Newest first.
0 libwebp incidents in the last 12 months
Critical 4 · High 3 · Med 2 · Low 1 · Update ½Severity-weighted: critical 4 · high 3 · medium 2 · low 1 · update ½LessMore
- Incidents
- 1
- Live
- 0
- Patched
- 1
- Days without an incident
- 1137
- Longest quiet run: 1135 days (Sep 14–Oct 22)
Show 1 older incident1 older incident
September 2023 1
Highlibwebp heap overflow exploited in the wild (CVE-2023-4863)Patched
libwebp (Google Chrome and everything that bundles libwebp) Patched
A heap overflow in libwebp's lossless decoder, found by Apple SEAR and Citizen Lab after the BLASTPASS iPhone exploit, was exploited in the wild. Because libwebp is everywhere, browsers, Electron apps and image libraries that bundle it all had to ship updates.
Open incident →CVE-2023-4863
