Every CVE Search/ Get API key

CVE-2023-4863

Duplicate Advisory: Bundled libwebp in Pillow vulnerable

8.8 HighIn KEVPublic exploitFix available

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
None
User interaction
Required

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

100.0%Up 99.9 points since Sep 13, 2023
90%50%10%1%

What each source reports

NVD Score used 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
CVE-2023-4863
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
CVE List 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
CVE-2023-4863
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
EUVDEUVD-2023-2533 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
EUVD-2023-2533
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
GitHub AdvisoriesGHSA-j7hp-h8jx-5ppr 8.8

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record
GHSA-j7hp-h8jx-5ppr
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
GitHub AdvisoriesGHSA-56pw-mpj4-fxww No score

Duplicate Advisory: Bundled libwebp in Pillow vulnerable

Duplicate Advisory

This advisory has been withdrawn because it is a duplicate of GHSA-56pw-mpj4-fxww. This link is maintained to preserve external references.

Original Description

Pillow versions before v10.0.1 bundled libwebp binaries in wheels that are vulnerable to CVE-2023-5129 (previously CVE-2023-4863). Pillow v10.0.1 upgrades the bundled libwebp binary to v1.3.2.

Record
GHSA-56pw-mpj4-fxww
Updated
2026-11-02
CISA KEV No score

Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.

Record
CVE-2023-4863
Weakness
CWE-787
Updated
2026-11-02
Show 50 moreShow less
OSVALPINE-CVE-2023-4863 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
ALPINE-CVE-2023-4863
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-03
OSVAZL-29758 8.8

CVE-2023-4863 affecting package libwebp for versions less than 1.3.2-1

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
AZL-29758
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSV 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
CVE-2023-4863
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVDEBIAN-CVE-2023-4863 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
DEBIAN-CVE-2023-4863
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVGHSA-j7hp-h8jx-5ppr 8.8

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record
GHSA-j7hp-h8jx-5ppr
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness
CWE-787
Updated
2026-11-02
OSVJLSEC-2026-441 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
JLSEC-2026-441
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1681 9.6

libwebp security update

This is an image format that does lossy compression of digital photographic images. WebP consists of a codec based on VP8, and a container based on RIFF. Webmasters, web developers and browser developers can use WebP to compress, archive and distribute digital images more efficiently.

Security Fix(es):

Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)

Record
OESA-2023-1681
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1711 8.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4573)

When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4574)

When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4575)

Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4581)

Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4584)

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)

Record
OESA-2023-1711
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1712 8.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4573)

When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4574)

When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4575)

Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4581)

Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4584)

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)

Record
OESA-2023-1712
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1713 8.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)

Record
OESA-2023-1713
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1714 8.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)

Record
OESA-2023-1714
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2023-1715 8.8

firefox security update

Mozilla Firefox is a standalone web browser, designed for standards compliance and performance. Its functionality can be enhanced via a plethora of extensions.

Security Fix(es):

When receiving rendering data over IPC mStream could have been destroyed when initialized, which could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4573)

When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4574)

When creating a callback over IPC for showing the File Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4575)

Excel .xll add-in files did not have a blocklist entry in Firefox's executable blocklist which allowed them to be downloaded without any warning of their potential harm. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4581)

Memory safety bugs present in Firefox 116, Firefox ESR 102.14, Firefox ESR 115.1, Thunderbird 102.14, and Thunderbird 115.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.(CVE-2023-4584)

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)(CVE-2023-4863)

Record
OESA-2023-1715
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVOESA-2026-3213 9.8

mozjs102 security update

SpiderMonkey is the code-name for Mozilla Firefox&apos;s C++ implementation of JavaScript. It is intended to be embedded in other applications that provide host environments for JavaScript.

Security Fix(es):

Unexpected data returned from the Safe Browsing API could have led to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 102.10 and Firefox ESR < 102.10.(CVE-2023-1945)

There exists a use after free/double free in libwebp. An attacker can use the ApplyFiltersAndEncode() function and loop through to free best.bw and assign best = trial pointer. The second loop will then return 0 because of an Out of memory error in VP8 encoder, the pointer is still assigned to trial and the AddressSanitizer will attempt a double free.(CVE-2023-1999)

A website could have obscured the fullscreen notification by using a combination of <code>window.open</code>, fullscreen requests, <code>window.name</code> assignments, and <code>setInterval</code> calls. This could have led to user confusion and possible spoofing attacks. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.(CVE-2023-29533)

Following a Garbage Collector compaction, weak maps may have been accessed before they were correctly traced. This resulted in memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.(CVE-2023-29535)

An attacker could cause the memory manager to incorrectly free a pointer that addresses attacker-controlled memory, resulting in an assertion, memory corruption, or a potentially exploitable crash. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.(CVE-2023-29536)

When handling the filename directive in the Content-Disposition header, the filename would be truncated if the filename contained a NULL character. This could have led to reflected file download attacks potentially tricking users to install malware. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.(CVE-2023-29539)

Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.(CVE-2023-29541)

A wrong lowering instruction in the ARM64 Ion compiler resulted in a wrong optimization result. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.(CVE-2023-29548)

Memory safety bugs present in Firefox 111 and Firefox ESR 102.9. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.(CVE-2023-29550)

In multiple cases browser prompts could have been obscured by popups controlled by content. These could have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11.(CVE-2023-32205)

An out-of-bound read could have led to a crash in the RLBox Expat driver. This…

Record
OESA-2026-3213
CVSS 3.1
9.8 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVPYSEC-2026-1794 8.8

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record
PYSEC-2026-1794
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5183 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5183
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5184 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5184
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5185 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5185
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5186 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5186
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5187 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5187
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5188 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5188
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5189 9.6

Red Hat Security Advisory: libwebp security update

Record
RHSA-2023:5189
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5190 9.6

Red Hat Security Advisory: libwebp security update

Record
RHSA-2023:5190
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5191 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5191
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5192 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5192
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5197 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5197
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5198 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5198
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5200 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5200
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5201 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5201
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5202 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5202
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5204 9.6

Red Hat Security Advisory: libwebp security update

Record
RHSA-2023:5204
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5205 9.6

Red Hat Security Advisory: firefox security update

Record
RHSA-2023:5205
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5214 9.6

Red Hat Security Advisory: libwebp security update

Record
RHSA-2023:5214
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5222 9.6

Red Hat Security Advisory: libwebp security update

Record
RHSA-2023:5222
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5223 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5223
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5224 9.6

Red Hat Security Advisory: thunderbird security update

Record
RHSA-2023:5224
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5236 9.6

Red Hat Security Advisory: libwebp: critical security update

Record
RHSA-2023:5236
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2023:5309 9.6

Red Hat Security Advisory: libwebp security update

Record
RHSA-2023:5309
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:5201 9.6

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.1.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:5201
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVRLSA-2023:5214 9.6

Important: libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
RLSA-2023:5214
CVSS 3.1
9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated
2026-11-02
OSVROOT-APP-PYPI-CVE-2023-4863 8.8

CVE-2023-4863 in pillow - Patched by Root

Root has patched CVE-2023-4863 in the pillow package for Root:PyPI. Multiple fixed versions available.

Record
ROOT-APP-PYPI-CVE-2023-4863
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-05
OSVUBUNTU-CVE-2023-4863 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record
UBUNTU-CVE-2023-4863
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVALSA-2023:5184 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.15.1 ESR.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5184
Updated
2026-11-02
OSVALSA-2023:5200 No score

Important: firefox security update

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 102.15.1 ESR.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5200
Updated
2026-11-02
OSVALSA-2023:5201 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.1.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5201
Updated
2026-11-02
OSVALSA-2023:5214 No score

Important: libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5214
Updated
2026-11-02
OSVALSA-2023:5224 No score

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.1.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5224
Updated
2026-11-02
OSVALSA-2023:5309 No score

Important: libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

  • libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record
ALSA-2023:5309
Updated
2026-11-02
OSVASB-A-299477569 No score

In BuildHuffmanTable of huffman_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Record
ASB-A-299477569
Updated
2026-11-05
OSVCLSA-2023-1697016696 No score

Fix CVE(s): CVE-2023-4863, CVE-2023-4836

  • SECURITY UPDATE: Heap buffer overflow
    • debian/patches/CVE-2023-4863-pre.patch: prepare sources to be patched
    • debian/patches/CVE-2023-4863-1.patch: first, BuildHuffmanTable() is called to check if the data is valid. If it is and the table is not big enough, more memory is allocated. This will make sure that valid (but unoptimized because of unbalanced codes) streams are still decodable.
    • debian/patches/CVE-2023-4863-2.patch: fix memory error
    • debian/patches/CVE-2023-4863-3.patch: remove unused code
    • debian/patches/CVE-2023-4863-4.patch: fix pointer offset int overflow
    • CVE-2023-4836
Record
CLSA-2023-1697016696
Updated
2026-11-02
OSVCLSA-2024-1717678054 No score

libwebp: Fix of CVE-2023-4863

  • CVE-2023-4863: fix OOB write in BuildHuffmanTable
Record
CLSA-2024-1717678054
Updated
2026-11-02

Affected products

Show 2 moreShow less

Affected packages

Affected packages
PackageAffectedFixed
libwebp-sys2
crates.io
 before 0.1.8
0.1.8
libwebp-sys
crates.io
 before 0.9.3
0.9.3
electron
npm
 22.0.0 up to 22.3.24
22.3.24
electron
npm
 24.0.0 up to 24.8.3
24.8.3
electron
npm
 25.0.0 up to 25.8.1
25.8.1
electron
npm
 26.0.0 up to 26.2.1
26.2.1
electron
npm
 27.0.0-beta.1 up to 27.0.0-beta.2
27.0.0-beta.2
SkiaSharp
NuGet
 2.0.0 up to 2.88.6
2.88.6
pillow
PyPI
 before 10.0.1
10.0.1
webp
crates.io
 before 0.2.6
0.2.6
Show 290 moreShow less
Affected packages
PackageAffectedFixed
magick.net-q16-anycpu
NuGet
 before 13.3.0
13.3.0
magick.net-q16-hdri-anycpu
NuGet
 before 13.3.0
13.3.0
magick.net-q16-x64
NuGet
 before 13.3.0
13.3.0
magick.net-q8-anycpu
NuGet
 before 13.3.0
13.3.0
magick.net-q8-openmp-x64
NuGet
 before 13.3.0
13.3.0
magick.net-q8-x64
NuGet
 before 13.3.0
13.3.0
github.com/chai2010/webp
Go
 before 0.0.0-20250406010349-76805d5a8860
0.0.0-20250406010349-76805d5a8860
github.com/chai2010/webp
Go
 1.1.2 up to 1.4.0
1.4.0
github.com/chai2010/webp
Go
 0.0.0 up to 1.1.2-0.20250406010349-76805d5a8860
1.1.2-0.20250406010349-76805d5a8860
chromium
Alpine:v3.18
 before 116.0.5845.187-r0
116.0.5845.187-r0
chromium
Alpine:v3.19
 before 116.0.5845.187-r0
116.0.5845.187-r0
chromium
Alpine:v3.20
 before 116.0.5845.187-r0
116.0.5845.187-r0
chromium
Alpine:v3.21
 before 116.0.5845.187-r0
116.0.5845.187-r0
chromium
Alpine:v3.22
 before 116.0.5845.187-r0
116.0.5845.187-r0
chromium
Alpine:v3.23
 before 116.0.5845.187-r0
116.0.5845.187-r0
chromium
Alpine:v3.24
 before 116.0.5845.187-r0
116.0.5845.187-r0
firefox-esr
Alpine:v3.18
 before 115.2.1-r0
115.2.1-r0
firefox-esr
Alpine:v3.19
 before 115.2.1-r0
115.2.1-r0
firefox-esr
Alpine:v3.20
 before 115.2.1-r0
115.2.1-r0
firefox-esr
Alpine:v3.21
 before 115.2.1-r0
115.2.1-r0
firefox-esr
Alpine:v3.22
 before 115.2.1-r0
115.2.1-r0
firefox-esr
Alpine:v3.23
 before 115.2.1-r0
115.2.1-r0
libwebp
Alpine:v3.15
 before 1.2.2-r2
1.2.2-r2
libwebp
Alpine:v3.16
 before 1.2.3-r2
1.2.3-r2
libwebp
Alpine:v3.17
 before 1.2.4-r3
1.2.4-r3
libwebp
Alpine:v3.18
 before 1.3.1-r1
1.3.1-r1
libwebp
Alpine:v3.19
 before 1.3.1-r1
1.3.1-r1
libwebp
Alpine:v3.20
 before 1.3.1-r1
1.3.1-r1
libwebp
Alpine:v3.21
 before 1.3.1-r1
1.3.1-r1
libwebp
Alpine:v3.22
 before 1.3.1-r1
1.3.1-r1
libwebp
Alpine:v3.23
 before 1.3.1-r1
1.3.1-r1
libwebp
Alpine:v3.24
 before 1.3.1-r1
1.3.1-r1
qt5-qtimageformats
Alpine:v3.18
 before 5.15.9_git20230407-r2
5.15.9_git20230407-r2
qt5-qtimageformats
Alpine:v3.19
 before 5.15.10_git20230612-r1
5.15.10_git20230612-r1
qt5-qtimageformats
Alpine:v3.20
 before 5.15.10_git20230612-r1
5.15.10_git20230612-r1
qt5-qtimageformats
Alpine:v3.21
 before 5.15.10_git20230612-r1
5.15.10_git20230612-r1
qt5-qtimageformats
Alpine:v3.22
 before 5.15.10_git20230612-r1
5.15.10_git20230612-r1
qt5-qtimageformats
Alpine:v3.23
 before 5.15.10_git20230612-r1
5.15.10_git20230612-r1
qt5-qtwebengine
Alpine:v3.18
 before 5.15.13-r7
5.15.13-r7
qt5-qtwebengine
Alpine:v3.19
 before 5.15.15-r1
5.15.15-r1
qt5-qtwebengine
Alpine:v3.20
 before 5.15.15-r1
5.15.15-r1
qt5-qtwebengine
Alpine:v3.21
 before 5.15.15-r1
5.15.15-r1
qt5-qtwebengine
Alpine:v3.22
 before 5.15.15-r1
5.15.15-r1
qt5-qtwebengine
Alpine:v3.23
 before 5.15.15-r1
5.15.15-r1
firefox
AlmaLinux:8
 before 102.15.1-1.el8_8.alma
102.15.1-1.el8_8.alma
firefox
AlmaLinux:9
 before 102.15.1-1.el9_2.alma
102.15.1-1.el9_2.alma
firefox-x11
AlmaLinux:9
 before 102.15.1-1.el9_2.alma
102.15.1-1.el9_2.alma
thunderbird
AlmaLinux:8
 before 102.15.1-1.el8_8.alma
102.15.1-1.el8_8.alma
libwebp
AlmaLinux:9
 before 1.2.0-7.el9_2
1.2.0-7.el9_2
libwebp-devel
AlmaLinux:9
 before 1.2.0-7.el9_2
1.2.0-7.el9_2
libwebp-tools
AlmaLinux:9
 before 1.2.0-7.el9_2
1.2.0-7.el9_2
thunderbird
AlmaLinux:9
 before 102.15.1-1.el9_2.alma
102.15.1-1.el9_2.alma
libwebp
AlmaLinux:8
 before 1.0.0-8.el8_8.1
1.0.0-8.el8_8.1
libwebp-devel
AlmaLinux:8
 before 1.0.0-8.el8_8.1
1.0.0-8.el8_8.1
platform/external/webp
Android
From an advisory covering 2 CVEs
 14-next:0 up to 14-next:2023-10-06, plus listed versions
14-next
14-next:2023-10-06
platform/external/webp
Android
From an advisory covering 2 CVEs
 11:0 up to 11:2023-10-06, plus listed versions
11
11:2023-10-06
platform/external/webp
Android
From an advisory covering 2 CVEs
 12:0 up to 12:2023-10-06, plus listed versions
12
12:2023-10-06
platform/external/webp
Android
From an advisory covering 2 CVEs
 12L:0 up to 12L:2023-10-06, plus listed versions
12L
12L:2023-10-06
platform/external/webp
Android
From an advisory covering 2 CVEs
 13:0 up to 13:2023-10-06, plus listed versions
13
13:2023-10-06
libwebp
Azure Linux:2
 before 1.3.2-1
1.3.2-1
libwebp-dev
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 0.6.1-2ubuntu0.18.04.2.tuxcare.els1
0.6.1-2ubuntu0.18.04.2.tuxcare.els1
libwebp6
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 0.6.1-2ubuntu0.18.04.2.tuxcare.els1
0.6.1-2ubuntu0.18.04.2.tuxcare.els1
libwebpdemux2
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 0.6.1-2ubuntu0.18.04.2.tuxcare.els1
0.6.1-2ubuntu0.18.04.2.tuxcare.els1
libwebpmux3
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 0.6.1-2ubuntu0.18.04.2.tuxcare.els1
0.6.1-2ubuntu0.18.04.2.tuxcare.els1
webp
TuxCare:Ubuntu:18.04
From an advisory covering 2 CVEs
 before 0.6.1-2ubuntu0.18.04.2.tuxcare.els1
0.6.1-2ubuntu0.18.04.2.tuxcare.els1
libwebp
TuxCare:CentOS-Stream:8
 before 1.0.0-9.el8.tuxcare.els1
1.0.0-9.el8.tuxcare.els1
libwebp-devel
TuxCare:CentOS-Stream:8
 before 1.0.0-9.el8.tuxcare.els1
1.0.0-9.el8.tuxcare.els1
libwebp-java
TuxCare:CentOS-Stream:8
 before 1.0.0-9.el8.tuxcare.els1
1.0.0-9.el8.tuxcare.els1
libwebp-tools
TuxCare:CentOS-Stream:8
 before 1.0.0-9.el8.tuxcare.els1
1.0.0-9.el8.tuxcare.els1
pillow
TuxCare:PyPI
From an advisory covering 2 CVEs
 9.4.0 up to 9.4.0.post2+tuxcare, plus listed versions
9.4.0.post1+tuxcare
9.4.0.post2+tuxcare
pillow
TuxCare:PyPI
From an advisory covering 2 CVEs
 9.5.0 up to 9.5.0.post1+tuxcare
9.5.0.post1+tuxcare
chromium
Debian:12
 before 117.0.5938.62-1, plus listed versions
113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1
Show 34 moreShow less
114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1
117.0.5938.62-1
chromium
Debian:13
 before 117.0.5938.62-1
117.0.5938.62-1
chromium
Debian:14
 before 117.0.5938.62-1
117.0.5938.62-1
firefox-esr
Debian:12
 before 102.15.1esr-1~deb12u1, plus listed versions
102.11.0esr-1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1
Show 12 moreShow less
102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.15.1esr-1~deb11u1
102.15.1esr-1~deb12u1
firefox-esr
Debian:13
 before 115.2.1esr-1
115.2.1esr-1
firefox-esr
Debian:14
 before 115.2.1esr-1
115.2.1esr-1
libwebp
Debian:12
 before 1.2.4-0.2+deb12u1, plus listed versions
1.2.4-0.2
1.2.4-0.2+deb12u1
libwebp
Debian:13
 before 1.2.4-0.3
1.2.4-0.3
libwebp
Debian:14
 before 1.2.4-0.3
1.2.4-0.3
thunderbird
Debian:12
 before 1:102.15.1-1~deb12u1, plus listed versions
1:102.11.0-11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u1
Show 16 moreShow less
1:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.15.1-1~deb11u1
1:102.15.1-1~deb12u1
thunderbird
Debian:13
 before 1:115.2.2-1
1:115.2.2-1
thunderbird
Debian:14
 before 1:115.2.2-1
1:115.2.2-1
firefox-esr
Debian:10
 before 102.15.1esr-1~deb10u1, plus listed versions
102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1
Show 45 moreShow less
102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-260.7.2esr-160.8.0esr-160.8.0esr-1~deb10u160.8.0esr-1~deb8u1
102.15.1esr-1~deb10u1
thunderbird
Debian:10
 before 1:102.15.1-1~deb10u1, plus listed versions
1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1
Show 45 moreShow less
1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u11:102.5.1-11:102.6.0-11:102.6.0-1~deb10u1
1:102.15.1-1~deb10u1
libwebp
Debian:10
 before 0.6.1-2+deb10u3, plus listed versions
0.6.1-20.6.1-2+deb10u10.6.1-2+deb10u2
0.6.1-2+deb10u3
firefox-esr
Debian:11
 before 102.15.1esr-1~deb11u1, plus listed versions
102.1.0esr-1102.1.0esr-2102.10.0esr-1102.10.0esr-1~deb10u1102.10.0esr-1~deb11u1
Show 45 moreShow less
102.11.0esr-1102.11.0esr-1~deb10u1102.11.0esr-1~deb11u1102.12.0esr-1102.12.0esr-1~deb10u1102.12.0esr-1~deb11u1102.12.0esr-1~deb12u1102.13.0esr-1102.13.0esr-1~deb10u1102.13.0esr-1~deb11u1102.13.0esr-1~deb12u1102.14.0esr-1~deb10u1102.14.0esr-1~deb11u1102.14.0esr-1~deb12u1102.15.0esr-1~deb10u1102.15.0esr-1~deb11u1102.15.0esr-1~deb12u1102.15.1esr-1~deb10u1102.2.0esr-1102.3.0esr-1102.3.0esr-1~deb10u1102.3.0esr-1~deb10u2102.3.0esr-1~deb11u1102.4.0esr-1102.4.0esr-1~deb10u1102.4.0esr-1~deb11u1102.5.0esr-1102.5.0esr-1~deb10u1102.5.0esr-1~deb11u1102.6.0esr-1102.6.0esr-1~deb10u1102.6.0esr-1~deb11u1102.7.0esr-1102.7.0esr-1~deb10u1102.7.0esr-1~deb11u1102.8.0esr-1102.8.0esr-1~deb10u1102.8.0esr-1~deb11u1102.9.0esr-1102.9.0esr-1~deb10u1102.9.0esr-1~deb11u1102.9.0esr-278.12.0esr-178.13.0esr-178.13.0esr-1~deb10u1
102.15.1esr-1~deb11u1
libwebp
Debian:11
 before 0.6.1-2.1+deb11u2, plus listed versions
0.6.1-2.10.6.1-2.1+deb11u1
0.6.1-2.1+deb11u2
thunderbird
Debian:11
 before 1:102.15.1-1~deb11u1, plus listed versions
1:102.0.1-11:102.0.2-11:102.0~b4-11:102.0~b7-11:102.1.0-1
Show 45 moreShow less
1:102.1.1-11:102.1.2-11:102.10.0-11:102.10.0-1~deb10u11:102.10.0-1~deb11u11:102.11.0-11:102.11.0-1~deb10u11:102.11.0-1~deb11u11:102.12.0-11:102.12.0-1~deb10u11:102.12.0-1~deb11u11:102.12.0-1~deb12u11:102.13.0-11:102.13.0-1~deb10u11:102.13.0-1~deb11u11:102.13.0-1~deb12u11:102.13.1-11:102.13.1-1~deb10u11:102.13.1-1~deb11u11:102.13.1-1~deb12u11:102.14.0-1~deb10u11:102.14.0-1~deb11u11:102.14.0-1~deb12u11:102.15.0-1~deb10u11:102.15.0-1~deb11u11:102.15.0-1~deb12u11:102.15.1-1~deb10u11:102.2.0-11:102.2.1-11:102.2.2-11:102.3.0-11:102.3.0-1~deb10u11:102.3.0-1~deb11u11:102.3.1-11:102.3.2-11:102.3.3-11:102.4.0-11:102.4.0-1~deb10u11:102.4.0-1~deb11u11:102.4.1-11:102.5.0-11:102.5.0-1~deb10u11:102.5.0-1~deb11u11:102.5.1-11:102.6.0-1
1:102.15.1-1~deb11u1
libwebp-sys2
crates.io
From an advisory covering 2 CVEs
 before 0.1.8
0.1.8
libwebp-sys
crates.io
From an advisory covering 2 CVEs
 before 0.9.3
0.9.3
electron
npm
From an advisory covering 2 CVEs
 22.0.0 up to 22.3.24
22.3.24
electron
npm
From an advisory covering 2 CVEs
 24.0.0 up to 24.8.3
24.8.3
electron
npm
From an advisory covering 2 CVEs
 25.0.0 up to 25.8.1
25.8.1
electron
npm
From an advisory covering 2 CVEs
 26.0.0 up to 26.2.1
26.2.1
electron
npm
From an advisory covering 2 CVEs
 27.0.0-beta.1 up to 27.0.0-beta.2
27.0.0-beta.2
SkiaSharp
NuGet
From an advisory covering 2 CVEs
 2.0.0 up to 2.88.6, plus listed versions
2.80.02.80.12.80.22.80.32.80.4
Show 6 moreShow less
2.88.02.88.12.88.22.88.32.88.42.88.5
2.88.6
github.com/chai2010/webp
Go
From an advisory covering 2 CVEs
 1.1.2 up to 1.4.0
1.4.0
pillow
PyPI
From an advisory covering 2 CVEs
 before 10.0.1, plus listed versions
1.01.11.21.31.4
Show 45 moreShow less
1.51.61.7.01.7.11.7.21.7.31.7.41.7.51.7.61.7.71.7.810.0.02.0.02.1.02.2.02.2.12.2.22.3.02.3.12.3.22.4.02.5.02.5.12.5.22.5.32.6.02.6.12.6.22.7.02.8.02.8.12.8.22.9.03.0.03.1.03.1.0.rc13.1.0rc13.1.13.1.23.2.03.3.03.3.13.3.23.3.33.4.0
10.0.1
webp
crates.io
From an advisory covering 2 CVEs
 before 0.2.6
0.2.6
magick.net-q16-anycpu
NuGet
From an advisory covering 2 CVEs
 before 13.3.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.8.10016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.1027.0.0.1037.0.0.1047.0.0.117.0.0.127.0.0.137.0.0.147.0.0.157.0.0.167.0.0.177.0.0.187.0.0.197.0.0.27.0.0.207.0.0.217.0.0.227.0.0.3
13.3.0
magick.net-q16-hdri-anycpu
NuGet
From an advisory covering 2 CVEs
 before 13.3.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.9.1016.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.1027.0.0.1037.0.0.1047.0.0.117.0.0.127.0.0.137.0.0.147.0.0.157.0.0.167.0.0.177.0.0.187.0.0.197.0.0.27.0.0.207.0.0.217.0.0.227.0.0.37.0.0.47.0.0.57.0.0.6
13.3.0
magick.net-q16-x64
NuGet
From an advisory covering 2 CVEs
 before 13.3.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.5.10016.8.5.4016.8.5.4026.8.6.3016.8.6.6016.8.6.8016.8.7.16.8.7.1016.8.7.5016.8.7.5026.8.7.9016.8.8.10016.8.8.2016.8.8.5016.8.8.7016.8.8.8016.8.8.9016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.102
13.3.0
magick.net-q8-anycpu
NuGet
From an advisory covering 2 CVEs
 before 13.3.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.8.10016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.1027.0.0.1037.0.0.1047.0.0.117.0.0.127.0.0.137.0.0.147.0.0.157.0.0.167.0.0.177.0.0.187.0.0.197.0.0.27.0.0.207.0.0.217.0.0.227.0.0.3
13.3.0
magick.net-q8-openmp-x64
NuGet
From an advisory covering 2 CVEs
 before 13.3.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.07.14.07.14.0.17.14.0.27.14.0.37.14.17.14.27.14.37.14.47.14.57.15.07.15.0.17.15.17.15.27.15.37.15.47.15.57.16.07.16.17.17.07.17.0.17.18.07.19.07.19.0.17.20.07.20.0.17.21.07.21.1
13.3.0
magick.net-q8-x64
NuGet
From an advisory covering 2 CVEs
 before 13.3.0, plus listed versions
10.0.010.1.011.0.011.1.011.1.1
Show 45 moreShow less
11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.5.10016.8.5.4016.8.5.4026.8.6.3016.8.6.6016.8.6.8016.8.7.16.8.7.1016.8.7.5016.8.7.5026.8.7.9016.8.8.10016.8.8.2016.8.8.5016.8.8.7016.8.8.8016.8.8.9016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.102
13.3.0
github.com/chai2010/webp
Go
From an advisory covering 2 CVEs
 before 0.0.0-20250406010349-76805d5a8860
0.0.0-20250406010349-76805d5a8860
github.com/chai2010/webp
Go
From an advisory covering 2 CVEs
 0.0.0 up to 1.1.2-0.20250406010349-76805d5a8860
1.1.2-0.20250406010349-76805d5a8860
libwebp_jll
Julia
 before 1.3.2+0
1.3.2+0
rootcerts
Mageia:8
From an advisory covering 25 CVEs
 before 20230720.00-1.mga8
20230720.00-1.mga8
nss
Mageia:8
From an advisory covering 25 CVEs
 before 3.93.0-1.mga8
3.93.0-1.mga8
firefox
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
firefox-l10n
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
thunderbird
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
thunderbird-l10n
Mageia:8
From an advisory covering 25 CVEs
 before 102.15.1-1.mga8
102.15.1-1.mga8
rootcerts
Mageia:9
From an advisory covering 25 CVEs
 before 20230720.00-1.mga9
20230720.00-1.mga9
nss
Mageia:9
From an advisory covering 25 CVEs
 before 3.93.0-1.mga9
3.93.0-1.mga9
firefox
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.1-1.mga9
115.2.1-1.mga9
firefox-l10n
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.1-1.mga9
115.2.1-1.mga9
thunderbird
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.2-1.mga9
115.2.2-1.mga9
thunderbird-l10n
Mageia:9
From an advisory covering 25 CVEs
 before 115.2.2-1.mga9
115.2.2-1.mga9
libwebp
Mageia:8
 before 1.1.0-2.2.mga8
1.1.0-2.2.mga8
libwebp
Mageia:9
 before 1.3.0-2.1.mga9
1.3.0-2.1.mga9
chromium-browser-stable
Mageia:9
From an advisory covering 18 CVEs
 before 117.0.5938.132-1.mga9.tainted
117.0.5938.132-1.mga9.tainted
libwebp
openEuler:20.03-LTS-SP1
 before 1.1.0-4.oe1
1.1.0-4.oe1
libwebp
openEuler:20.03-LTS-SP3
 before 1.1.0-4.oe1
1.1.0-4.oe1
libwebp
openEuler:22.03-LTS
 before 1.2.1-4.oe2203sp2
1.2.1-4.oe2203sp2
libwebp
openEuler:22.03-LTS-SP1
 before 1.2.1-4.oe2203sp1
1.2.1-4.oe2203sp1
libwebp
openEuler:22.03-LTS-SP2
 before 1.2.1-4.oe2203sp2
1.2.1-4.oe2203sp2
firefox
openEuler:22.03-LTS-SP1
From an advisory covering 6 CVEs
 before 102.15.0-2.oe2203sp1
102.15.0-2.oe2203sp1
firefox
openEuler:22.03-LTS-SP2
From an advisory covering 6 CVEs
 before 102.15.0-2.oe2203sp2
102.15.0-2.oe2203sp2
firefox
openEuler:20.03-LTS-SP1
 before 79.0-13.oe1
79.0-13.oe1
firefox
openEuler:20.03-LTS-SP3
 before 79.0-13.oe1
79.0-13.oe1
firefox
openEuler:22.03-LTS
From an advisory covering 6 CVEs
 before 102.15.0-2.oe2203
102.15.0-2.oe2203
mozjs102
openEuler:24.03-LTS-SP1
From an advisory covering 37 CVEs
 before 102.15.1-1.oe2403sp1
102.15.1-1.oe2403sp1
firefox
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_1
0:102.15.1-1.el8_1
firefox-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_1
0:102.15.1-1.el8_1
firefox-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_1
0:102.15.1-1.el8_1
firefox
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_8
0:102.15.1-1.el8_8
firefox-debuginfo
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_8
0:102.15.1-1.el8_8
firefox-debugsource
Red Hat:enterprise_linux:8::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_8
0:102.15.1-1.el8_8
thunderbird
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird-debugsource
Red Hat:rhel_aus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird-debugsource
Red Hat:rhel_e4s:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird-debuginfo
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird-debugsource
Red Hat:rhel_tus:8.4::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_4
0:102.15.1-1.el8_4
thunderbird
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
firefox-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_2
0:102.15.1-1.el8_2
thunderbird
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_1
0:102.15.1-1.el8_1
thunderbird-debuginfo
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_1
0:102.15.1-1.el8_1
thunderbird-debugsource
Red Hat:rhel_e4s:8.1::appstream
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_1
0:102.15.1-1.el8_1
libwebp
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_6.1
0:1.0.0-7.el8_6.1
libwebp-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_6.1
0:1.0.0-7.el8_6.1
libwebp-debugsource
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_6.1
0:1.0.0-7.el8_6.1
libwebp-devel
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_6.1
0:1.0.0-7.el8_6.1
libwebp-java-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_6.1
0:1.0.0-7.el8_6.1
libwebp-tools-debuginfo
Red Hat:rhel_eus:8.6::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_6.1
0:1.0.0-7.el8_6.1
libwebp
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-debugsource
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-devel
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-java-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-tools-debuginfo
Red Hat:rhel_aus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-debugsource
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-devel
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-java-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-tools-debuginfo
Red Hat:rhel_e4s:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-debugsource
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-devel
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
libwebp-java-debuginfo
Red Hat:rhel_tus:8.2::appstream
From an advisory covering 2 CVEs
 before 0:1.0.0-7.el8_2.1
0:1.0.0-7.el8_2.1
firefox
Rocky Linux:8
 before 0:102.15.1-1.el8_8
0:102.15.1-1.el8_8
thunderbird
Rocky Linux:8
From an advisory covering 2 CVEs
 before 0:102.15.1-1.el8_8
0:102.15.1-1.el8_8
libwebp
Rocky Linux:9
From an advisory covering 2 CVEs
 before 0:1.2.0-7.el9_2
0:1.2.0-7.el9_2
libwebp
Rocky Linux:8
 before 0:1.0.0-8.el8_8.1
0:1.0.0-8.el8_8.1
pillow
Root:PyPI
 before 9.5.0+aikido.1
9.5.0+aikido.19.3.0+aikido.19.3.0+aikido.29.5.0+aikido.29.3.0+aikido.39.5.0+aikido.39.3.0+aikido.49.5.0+aikido.49.3.0+aikido.59.5.0+aikido.59.3.0+aikido.69.5.0+aikido.69.5.0+aikido.79.3.0+aikido.79.3.0+aikido.89.3.0+aikido.99.3.0+aikido.109.3.0+aikido.119.5.0+aikido.89.5.0+aikido.99.5.0+aikido.109.3.0+aikido.129.5.0+aikido.119.3.0+aikido.139.3.0+aikido.149.5.0+aikido.129.3.0+aikido.159.3.0+aikido.169.3.0+aikido.179.5.0+aikido.139.0.1+aikido.19.0.1+aikido.28.0.1+aikido.19.5.0+aikido.148.1.2+aikido.18.0.1+aikido.210.0.0+aikido.18.2.0+aikido.19.4.0+aikido.19.0.0+aikido.19.0.0+aikido.27.0.0+aikido.27.0.0+aikido.39.5.0+aikido.159.5.0+aikido.169.5.0+aikido.179.5.0+aikido.189.5.0+aikido.19
pillow
Root:PyPI
 before 9.5.0+aikido.10
9.5.0+aikido.109.5.0+aikido.119.5.0+aikido.129.3.0+aikido.169.3.0+aikido.179.5.0+aikido.139.0.1+aikido.19.0.1+aikido.28.0.1+aikido.19.5.0+aikido.148.1.2+aikido.18.0.1+aikido.210.0.0+aikido.18.2.0+aikido.19.4.0+aikido.19.0.0+aikido.19.0.0+aikido.27.0.0+aikido.27.0.0+aikido.39.5.0+aikido.159.5.0+aikido.169.5.0+aikido.179.5.0+aikido.189.5.0+aikido.19
libwebp-sys2
crates.io
From an advisory covering 2 CVEs
 0.0.0-0 up to 0.1.8
0.1.8
libwebp-sys
crates.io
From an advisory covering 2 CVEs
 0.0.0-0 up to 0.9.3
0.9.3
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 115.2.1-150000.150.103.1
115.2.1-150000.150.103.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 115.2.1-150000.150.103.1
115.2.1-150000.150.103.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 115.2.1-150000.150.103.1
115.2.1-150000.150.103.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP4
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise Module for Desktop Applications 15 SP5
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Enterprise Storage 7.1
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
openSUSE:Leap 15.4
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
openSUSE:Leap 15.5
 before 115.2.1-150200.152.105.1
115.2.1-150200.152.105.1
MozillaFirefox
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 115.2.1-112.179.1
115.2.1-112.179.1
MozillaFirefox
SUSE:Linux Enterprise Server 12 SP5
 before 115.2.1-112.179.1
115.2.1-112.179.1
MozillaFirefox
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 115.2.1-112.179.1
115.2.1-112.179.1
libwebp
SUSE:Linux Enterprise Module for Basesystem 15 SP4
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise Module for Basesystem 15 SP5
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise High Performance Computing 15 SP2-LTSS
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise High Performance Computing 15 SP3-ESPOS
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise High Performance Computing 15 SP3-LTSS
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise Server 15 SP2-LTSS
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise Server 15 SP3-LTSS
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise Server for SAP Applications 15 SP2
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Linux Enterprise Server for SAP Applications 15 SP3
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Manager Proxy 4.2
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Manager Server 4.2
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
SUSE:Enterprise Storage 7.1
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
openSUSE:Leap 15.4
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
libwebp
openSUSE:Leap 15.5
 before 1.0.3-150200.3.10.1
1.0.3-150200.3.10.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP4
From an advisory covering 15 CVEs
 before 115.2.2-150200.8.130.1
115.2.2-150200.8.130.1
MozillaThunderbird
SUSE:Linux Enterprise Module for Package Hub 15 SP5
From an advisory covering 15 CVEs
 before 115.2.2-150200.8.130.1
115.2.2-150200.8.130.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP4
From an advisory covering 15 CVEs
 before 115.2.2-150200.8.130.1
115.2.2-150200.8.130.1
MozillaThunderbird
SUSE:Linux Enterprise Workstation Extension 15 SP5
From an advisory covering 15 CVEs
 before 115.2.2-150200.8.130.1
115.2.2-150200.8.130.1
MozillaThunderbird
openSUSE:Leap 15.4
From an advisory covering 15 CVEs
 before 115.2.2-150200.8.130.1
115.2.2-150200.8.130.1
MozillaThunderbird
openSUSE:Leap 15.5
From an advisory covering 15 CVEs
 before 115.2.2-150200.8.130.1
115.2.2-150200.8.130.1
libwebp
SUSE:HPE Helion OpenStack 8
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:OpenStack Cloud 8
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:OpenStack Cloud 9
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:OpenStack Cloud Crowbar 8
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:OpenStack Cloud Crowbar 9
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:Linux Enterprise Software Development Kit 12 SP5
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:Linux Enterprise Server 12 SP5
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:Linux Enterprise Server for SAP Applications 12 SP5
 before 0.4.3-4.15.1
0.4.3-4.15.1
libwebp
SUSE:Linux Enterprise Module for Package Hub 15 SP4
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
SUSE:Linux Enterprise Module for Package Hub 15 SP5
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
SUSE:Linux Enterprise High Performance Computing 15 SP1-LTSS
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
SUSE:Linux Enterprise Server 15 SP1-LTSS
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
SUSE:Linux Enterprise Server for SAP Applications 15 SP1
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
SUSE:Linux Enterprise Workstation Extension 15 SP4
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
SUSE:Linux Enterprise Workstation Extension 15 SP5
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
openSUSE:Leap 15.4
 before 0.5.0-150000.3.14.1
0.5.0-150000.3.14.1
libwebp
Ubuntu:Pro:18.04:LTS
 before 0.6.1-2ubuntu0.18.04.2+esm1, plus listed versions
0.6.0-30.6.0-40.6.1-10.6.1-20.6.1-2ubuntu0.18.04.10.6.1-2ubuntu0.18.04.2
0.6.1-2ubuntu0.18.04.2+esm1
firefox
Ubuntu:20.04:LTS
 before 117.0.1+build2-0ubuntu0.20.04.1, plus listed versions
69.0.3+build1-0ubuntu170.0+build2-0ubuntu170.0+build2-0ubuntu270.0.1+build1-0ubuntu271.0+build2-0ubuntu2
Show 45 moreShow less
71.0+build5-0ubuntu172.0.1+build1-0ubuntu172.0.2+build1-0ubuntu173.0+build1-0ubuntu173.0+build2-0ubuntu173.0+build3-0ubuntu173.0.1+build1-0ubuntu174.0+build1-0ubuntu174.0+build2-0ubuntu174.0+build2-0ubuntu274.0+build3-0ubuntu175.0+build3-0ubuntu176.0+build2-0ubuntu0.20.04.176.0.1+build1-0ubuntu0.20.04.177.0.1+build1-0ubuntu0.20.04.178.0.1+build1-0ubuntu0.20.04.178.0.2+build2-0ubuntu0.20.04.179.0+build1-0ubuntu0.20.04.180.0+build2-0ubuntu0.20.04.180.0.1+build1-0ubuntu0.20.04.181.0+build2-0ubuntu0.20.04.181.0.2+build1-0ubuntu0.20.04.182.0+build2-0ubuntu0.20.04.182.0.2+build1-0ubuntu0.20.04.182.0.3+build1-0ubuntu0.20.04.183.0+build2-0ubuntu0.20.04.184.0+build3-0ubuntu0.20.04.184.0.1+build1-0ubuntu0.20.04.184.0.2+build1-0ubuntu0.20.04.185.0+build1-0ubuntu0.20.04.185.0.1+build1-0ubuntu0.20.04.186.0+build3-0ubuntu0.20.04.186.0.1+build1-0ubuntu0.20.04.187.0+build3-0ubuntu0.20.04.288.0+build2-0ubuntu0.20.04.188.0.1+build1-0ubuntu0.20.04.289.0+build2-0ubuntu0.20.04.289.0.1+build1-0ubuntu0.20.04.189.0.2+build1-0ubuntu0.20.04.190.0+build1-0ubuntu0.20.04.190.0.2+build1-0ubuntu0.20.04.191.0+build2-0ubuntu0.20.04.191.0.1+build1-0ubuntu0.20.04.191.0.2+build1-0ubuntu0.20.04.192.0+build3-0ubuntu0.20.04.1
117.0.1+build2-0ubuntu0.20.04.1
libwebp
Ubuntu:20.04:LTS
 before 0.6.1-2ubuntu0.20.04.3, plus listed versions
0.6.1-20.6.1-2ubuntu0.20.04.10.6.1-2ubuntu0.20.04.2
0.6.1-2ubuntu0.20.04.3
thunderbird
Ubuntu:20.04:LTS
 before 1:102.15.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 29 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.1
1:102.15.1+build1-0ubuntu0.20.04.1
libwebp
Ubuntu:22.04:LTS
 before 1.2.2-2ubuntu0.22.04.2, plus listed versions
0.6.1-2.10.6.1-2.1build11.2.1-61.2.1-71.2.2-21.2.2-2ubuntu0.22.04.1
1.2.2-2ubuntu0.22.04.2
thunderbird
Ubuntu:22.04:LTS
 before 1:102.15.1+build1-0ubuntu0.22.04.1, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 18 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.1
1:102.15.1+build1-0ubuntu0.22.04.1
thunderbird
Ubuntu:20.04:LTS
From an advisory covering 6 CVEs
 before 1:102.15.1+build1-0ubuntu0.20.04.1, plus listed versions
1:68.1.2+build1-0ubuntu11:68.1.2+build1-0ubuntu21:68.2.1+build1-0ubuntu11:68.2.2+build1-0ubuntu11:68.3.0+build2-0ubuntu1
Show 29 moreShow less
1:68.3.1+build1-0ubuntu21:68.4.1+build1-0ubuntu11:68.4.2+build2-0ubuntu11:68.5.0+build1-0ubuntu11:68.6.0+build2-0ubuntu11:68.7.0+build1-0ubuntu11:68.7.0+build1-0ubuntu21:68.8.0+build2-0ubuntu0.20.04.21:68.10.0+build1-0ubuntu0.20.04.11:78.7.1+build1-0ubuntu0.20.04.11:78.8.1+build1-0ubuntu0.20.04.11:78.11.0+build1-0ubuntu0.20.04.21:78.13.0+build1-0ubuntu0.20.04.21:78.14.0+build1-0ubuntu0.20.04.11:78.14.0+build1-0ubuntu0.20.04.21:91.5.0+build1-0ubuntu0.20.04.11:91.7.0+build2-0ubuntu0.20.04.11:91.8.1+build1-0ubuntu0.20.04.11:91.9.1+build1-0ubuntu0.20.04.11:91.11.0+build2-0ubuntu0.20.04.11:102.2.2+build1-0ubuntu0.20.04.11:102.4.2+build2-0ubuntu0.20.04.11:102.7.1+build2-0ubuntu0.20.04.11:102.8.0+build2-0ubuntu0.20.04.11:102.9.0+build1-0ubuntu0.20.04.11:102.10.0+build2-0ubuntu0.20.04.11:102.11.0+build1-0ubuntu0.20.04.11:102.13.0+build1-0ubuntu0.20.04.11:102.15.0+build1-0ubuntu0.20.04.1
1:102.15.1+build1-0ubuntu0.20.04.1
thunderbird
Ubuntu:22.04:LTS
From an advisory covering 6 CVEs
 before 1:102.15.1+build1-0ubuntu0.22.04.1, plus listed versions
1:91.1.2+build1-0ubuntu11:91.3.0+build2-0ubuntu11:91.3.1+build1-0ubuntu11:91.3.2+build1-0ubuntu11:91.4.0+build1.1-0ubuntu1
Show 18 moreShow less
1:91.4.0+build2-0ubuntu11:91.5.0+build1-0ubuntu11:91.5.1+build1-0ubuntu11:91.6.1+build1-0ubuntu11:91.7.0+build1-0ubuntu11:91.7.0+build2-0ubuntu11:91.8.0+build2-0ubuntu11:91.9.1+build1-0ubuntu0.22.04.11:91.11.0+build2-0ubuntu0.22.04.11:102.2.2+build1-0ubuntu0.22.04.11:102.4.2+build2-0ubuntu0.22.04.11:102.7.1+build2-0ubuntu0.22.04.11:102.8.0+build2-0ubuntu0.22.04.11:102.9.0+build1-0ubuntu0.22.04.11:102.10.0+build2-0ubuntu0.22.04.11:102.11.0+build1-0ubuntu0.22.04.11:102.13.0+build1-0ubuntu0.22.04.11:102.15.0+build1-0ubuntu0.22.04.1
1:102.15.1+build1-0ubuntu0.22.04.1
chromium
SUSE:Package Hub 15 SP4
 before 116.0.5845.187-bp155.2.31.1
116.0.5845.187-bp155.2.31.1
chromium
SUSE:Package Hub 15 SP5
 before 116.0.5845.187-bp155.2.31.1
116.0.5845.187-bp155.2.31.1
chromium
openSUSE:Leap 15.4
 before 116.0.5845.187-bp155.2.31.1
116.0.5845.187-bp155.2.31.1
chromium
openSUSE:Leap 15.5
 before 116.0.5845.187-bp155.2.31.1
116.0.5845.187-bp155.2.31.1
chromium
SUSE:Package Hub 15 SP4
 before 116.0.5845.187-bp155.2.34.1
116.0.5845.187-bp155.2.34.1
chromium
SUSE:Package Hub 15 SP5
 before 116.0.5845.187-bp155.2.34.1
116.0.5845.187-bp155.2.34.1
chromium
openSUSE:Leap 15.4
 before 116.0.5845.187-bp155.2.34.1
116.0.5845.187-bp155.2.34.1
chromium
openSUSE:Leap 15.5
 before 116.0.5845.187-bp155.2.34.1
116.0.5845.187-bp155.2.34.1
seamonkey
SUSE:Package Hub 15 SP5
 before 2.53.17.1-bp155.2.3.1
2.53.17.1-bp155.2.3.1
seamonkey
openSUSE:Leap 15.5
 before 2.53.17.1-bp155.2.3.1
2.53.17.1-bp155.2.3.1
MozillaFirefox
openSUSE:Tumbleweed
 before 117.0.1-1.1
117.0.1-1.1
MozillaThunderbird
openSUSE:Tumbleweed
 before 115.2.2-1.1
115.2.2-1.1
chromium
openSUSE:Tumbleweed
 before 116.0.5845.187-1.1
116.0.5845.187-1.1
libwebp
openSUSE:Tumbleweed
 before 1.3.1-2.1
1.3.1-2.1
chromium
openSUSE:Tumbleweed
From an advisory covering 11 CVEs
 before 116.0.5845.179-1.1
116.0.5845.179-1.1
element-desktop
openSUSE:Tumbleweed
 before 1.11.43-1.1
1.11.43-1.1
matrix-synapse
openSUSE:Tumbleweed
From an advisory covering 3 CVEs
 before 1.93.0-1.1
1.93.0-1.1
opencv
openSUSE:Tumbleweed
 before 4.8.1-1.1
4.8.1-1.1
qutebrowser
openSUSE:Tumbleweed
 before 3.0.2-1.1
3.0.2-1.1
shotcut
openSUSE:Tumbleweed
From an advisory covering 2 CVEs
 before 23.11.29-1.1
23.11.29-1.1
firefox-esr
openSUSE:Tumbleweed
From an advisory covering 1860 CVEs
 before 128.5.1-1.1
128.5.1-1.1
afl
openSUSE:Tumbleweed
 before 5.00c-1.1
5.00c-1.1
python-imagecodecs
openSUSE:Tumbleweed
 before 2026.3.6-2.10
2026.3.6-2.10
dssim
openSUSE:Tumbleweed
 before 3.5.1-1.1
3.5.1-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubmistymntncop/CVE-2023-48632023-09-21
PoC in GitHubbbaranoff/CVE-2023-48632023-09-25
PoC in GitHubtalbeerysec/BAD-WEBP-CVE-2023-48632023-09-25
PoC in GitHubOITApps/Find-VulnerableElectronVersion2023-09-29
PoC in GitHubGTGalaxi/ElectronVulnerableVersion2023-09-30
PoC in GitHubmurphysecurity/libwebp-checker2023-10-05
PoC in GitHubhuiwen-yayaya/CVE-2023-48632023-11-11
PoC in GitHubLiveOverflow/webp-CVE-2023-48632023-12-18
PoC in GitHubcaoweiquan322/NotEnough2023-12-19
PoC in GitHubCrackerCat/CVE-2023-4863-2024-02-04
Show 4 moreShow less
Public exploits
SourceLinkDate
PoC in GitHubjpsbern/CVE-2023-48632026-04-22
PoC in GitHub577Industries/aegisgraph2026-05-08
PoC in GitHubpixelotes/lab-cve-2023-48632026-05-13
PoC in GitHubShcesama/cve-2023-4863-analysis2026-06-03

History

History
RecordedChangedSources
affectedOSV
affected
affectedOSV
affectedOSV
affectedOSV
affectedOSV
affectedOSV
exploitation
affectedOSV
affectedOSV
affected, exploitsOSV
affected
first indexedCVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-4863 is a high vulnerability (CVSS 8.8) in Google Chrome, published September 12, 2023. CISA lists it as known to be exploited, since September 13, 2023. EUVD reports exploitation since September 13, 2023. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 100.0%, the 99th percentile. Fixed in libwebp-sys2 0.1.8.

References

Show 194 moreShow less
This page doesn't list everything

Left out here: 91 package rows, 1,335 versions, 1,932 references and the rest of 1 source description. The JSON record has them. Also not on the record: 3 aliases. ID and package lookups still check them. Left out on purpose, here and in the API, to keep responses small: 52 source records.

Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open