Lucene search

K
f5F5F5:K000137054
HistorySep 29, 2023 - 12:00 a.m.

K000137054 : libwebp vulnerabilities CVE-2023-4863 and CVE-2023-5129

2023-09-2900:00:00
my.f5.com
13
libwebp
buffer overflow
remote attacker
out of bounds
html page

7.4 High

AI Score

Confidence

Low

0.609 Medium

EPSS

Percentile

97.8%

Security Advisory Description

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

REJECTED This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

Impact

There is no impact; F5 products are not affected by this vulnerability.