CVE-2023-5129

With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ...

10.0 CriticalFix availableRejected

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: High
Integrity: High
Availability: High

What each source reports

GitHub Advisories Score usedGHSA-hhrh-69hc-fgg7 10.0

With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap. ...

With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap.

The ReadHuffmanCodes() function allocates the HuffmanCode buffer with a size that comes from an array of precomputed sizes: kTableSize. The color_cache_bits value defines which size to use.

The kTableSize array only takes into account sizes for 8-bit first-level table lookups but not second-level table lookups. libwebp allows codes that are up to 15-bit (MAX_ALLOWED_CODE_LENGTH). When BuildHuffmanTable() attempts to fill the second-level tables it may write data out-of-bounds. The OOB write to the undersized array happens in ReplicateValue.

Record: GHSA-hhrh-69hc-fgg7
CVSS 3.1: 10.0 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Weakness: CWE-20
Updated: 2026-11-02

CVE List No score

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

Record: CVE-2023-5129
Updated: 2026-11-02

EUVDEUVD-2023-57467 No score

This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

Record: EUVD-2023-57467
Updated: 2026-11-03

NVD No score

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

Record: CVE-2023-5129
Updated: 2026-11-02

OSVCVE-2023-4863 8.8

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Record: CVE-2023-4863
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVGHSA-j7hp-h8jx-5ppr 8.8

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: GHSA-j7hp-h8jx-5ppr
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness: CWE-787
Updated: 2026-11-02

Show 30 moreShow less

OSVPYSEC-2026-1794 8.8

libwebp: OOB write in BuildHuffmanTable

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Record: PYSEC-2026-1794
CVSS 3.1: 8.8 HighCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5183 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5183
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5184 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5184
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5185 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5185
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5186 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5186
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5187 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5187
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5188 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5188
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5189 9.6

Red Hat Security Advisory: libwebp security update

Record: RHSA-2023:5189
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5190 9.6

Red Hat Security Advisory: libwebp security update

Record: RHSA-2023:5190
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5191 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5191
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5192 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5192
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5197 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5197
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5198 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5198
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5200 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5200
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5201 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5201
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5202 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5202
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5204 9.6

Red Hat Security Advisory: libwebp security update

Record: RHSA-2023:5204
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5205 9.6

Red Hat Security Advisory: firefox security update

Record: RHSA-2023:5205
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5214 9.6

Red Hat Security Advisory: libwebp security update

Record: RHSA-2023:5214
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5223 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5223
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5224 9.6

Red Hat Security Advisory: thunderbird security update

Record: RHSA-2023:5224
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5236 9.6

Red Hat Security Advisory: libwebp: critical security update

Record: RHSA-2023:5236
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRHSA-2023:5309 9.6

Red Hat Security Advisory: libwebp security update

Record: RHSA-2023:5309
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2023:5201 9.6

Important: thunderbird security update

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 102.15.1.

Security Fix(es):

libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2023:5201
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVRLSA-2023:5214 9.6

Important: libwebp security update

The libwebp packages provide a library and tools for the WebP graphics format. WebP is an image format with a lossy compression of digital photographic images. WebP consists of a codec based on the VP8 format, and a container based on the Resource Interchange File Format (RIFF). Webmasters, web developers and browser developers can use WebP to compress, archive, and distribute digital images more efficiently.

Security Fix(es):

libwebp: Heap buffer overflow in WebP Codec (CVE-2023-4863)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Record: RLSA-2023:5214
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

OSVALPINE-CVE-2023-5129 No score

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

Record: ALPINE-CVE-2023-5129
Updated: 2026-11-03

OSVASB-A-299477569 No score

In BuildHuffmanTable of huffman_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.

Record: ASB-A-299477569
Updated: 2026-11-05

OSVopenSUSE-SU-2024:13304-1 No score

cargo-audit-advisory-db-20231007-1.1 on GA media

These are all security issues fixed in the cargo-audit-advisory-db-20231007-1.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2024:13304-1
Updated: 2026-11-02

OSVRUSTSEC-2023-0060 No score

libwebp: OOB write in BuildHuffmanTable

Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild.

libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable".

Record: RUSTSEC-2023-0060
Updated: 2026-11-02

OSVRUSTSEC-2023-0061 No score

libwebp: OOB write in BuildHuffmanTable

Google and Mozilla have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild.

libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable".

Record: RUSTSEC-2023-0061
Updated: 2026-11-02

Affected packages

Affected packages
Package	Affected	Fixed
`tiledb` Alpine:v3.19	before 2.17.4-r0	2.17.4-r0
`tiledb` Alpine:v3.20	before 2.17.4-r0	2.17.4-r0
`tiledb` Alpine:v3.21	before 2.17.4-r0	2.17.4-r0
`tiledb` Alpine:v3.22	before 2.17.4-r0	2.17.4-r0
`tiledb` Alpine:v3.23	before 2.17.4-r0	2.17.4-r0
`tiledb` Alpine:v3.24	before 2.17.4-r0	2.17.4-r0
`platform/external/webp` Android From an advisory covering 2 CVEs	14-next:0 up to 14-next:2023-10-06, plus listed versions 14-next	14-next:2023-10-06
`platform/external/webp` Android From an advisory covering 2 CVEs	11:0 up to 11:2023-10-06, plus listed versions 11	11:2023-10-06
`platform/external/webp` Android From an advisory covering 2 CVEs	12:0 up to 12:2023-10-06, plus listed versions 12	12:2023-10-06
`platform/external/webp` Android From an advisory covering 2 CVEs	12L:0 up to 12L:2023-10-06, plus listed versions 12L	12L:2023-10-06

Show 157 moreShow less

Affected packages
Package	Affected	Fixed
`platform/external/webp` Android From an advisory covering 2 CVEs	13:0 up to 13:2023-10-06, plus listed versions 13	13:2023-10-06
`libwebp-sys2` crates.io From an advisory covering 2 CVEs	before 0.1.8	0.1.8
`libwebp-sys` crates.io From an advisory covering 2 CVEs	before 0.9.3	0.9.3
`electron` npm From an advisory covering 2 CVEs	22.0.0 up to 22.3.24	22.3.24
`electron` npm From an advisory covering 2 CVEs	24.0.0 up to 24.8.3	24.8.3
`electron` npm From an advisory covering 2 CVEs	25.0.0 up to 25.8.1	25.8.1
`electron` npm From an advisory covering 2 CVEs	26.0.0 up to 26.2.1	26.2.1
`electron` npm From an advisory covering 2 CVEs	27.0.0-beta.1 up to 27.0.0-beta.2	27.0.0-beta.2
`SkiaSharp` NuGet From an advisory covering 2 CVEs	2.0.0 up to 2.88.6, plus listed versions 2.80.02.80.12.80.22.80.32.80.4 Show 6 moreShow less 2.88.02.88.12.88.22.88.32.88.42.88.5	2.88.6
`github.com/chai2010/webp` Go From an advisory covering 2 CVEs	1.1.2 up to 1.4.0	1.4.0
`pillow` PyPI From an advisory covering 2 CVEs	before 10.0.1, plus listed versions 1.01.11.21.31.4 Show 45 moreShow less 1.51.61.7.01.7.11.7.21.7.31.7.41.7.51.7.61.7.71.7.810.0.02.0.02.1.02.2.02.2.12.2.22.3.02.3.12.3.22.4.02.5.02.5.12.5.22.5.32.6.02.6.12.6.22.7.02.8.02.8.12.8.22.9.03.0.03.1.03.1.0.rc13.1.0rc13.1.13.1.23.2.03.3.03.3.13.3.23.3.33.4.0	10.0.1
`webp` crates.io From an advisory covering 2 CVEs	before 0.2.6	0.2.6
`magick.net-q16-anycpu` NuGet From an advisory covering 2 CVEs	before 13.3.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less 11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.8.10016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.1027.0.0.1037.0.0.1047.0.0.117.0.0.127.0.0.137.0.0.147.0.0.157.0.0.167.0.0.177.0.0.187.0.0.197.0.0.27.0.0.207.0.0.217.0.0.227.0.0.3	13.3.0
`magick.net-q16-hdri-anycpu` NuGet From an advisory covering 2 CVEs	before 13.3.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less 11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.9.1016.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.1027.0.0.1037.0.0.1047.0.0.117.0.0.127.0.0.137.0.0.147.0.0.157.0.0.167.0.0.177.0.0.187.0.0.197.0.0.27.0.0.207.0.0.217.0.0.227.0.0.37.0.0.47.0.0.57.0.0.6	13.3.0
`magick.net-q16-x64` NuGet From an advisory covering 2 CVEs	before 13.3.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less 11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.5.10016.8.5.4016.8.5.4026.8.6.3016.8.6.6016.8.6.8016.8.7.16.8.7.1016.8.7.5016.8.7.5026.8.7.9016.8.8.10016.8.8.2016.8.8.5016.8.8.7016.8.8.8016.8.8.9016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.102	13.3.0
`magick.net-q8-anycpu` NuGet From an advisory covering 2 CVEs	before 13.3.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less 11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.8.10016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.1027.0.0.1037.0.0.1047.0.0.117.0.0.127.0.0.137.0.0.147.0.0.157.0.0.167.0.0.177.0.0.187.0.0.197.0.0.27.0.0.207.0.0.217.0.0.227.0.0.3	13.3.0
`magick.net-q8-openmp-x64` NuGet From an advisory covering 2 CVEs	before 13.3.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less 11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.07.14.07.14.0.17.14.0.27.14.0.37.14.17.14.27.14.37.14.47.14.57.15.07.15.0.17.15.17.15.27.15.37.15.47.15.57.16.07.16.17.17.07.17.0.17.18.07.19.07.19.0.17.20.07.20.0.17.21.07.21.1	13.3.0
`magick.net-q8-x64` NuGet From an advisory covering 2 CVEs	before 13.3.0, plus listed versions 10.0.010.1.011.0.011.1.011.1.1 Show 45 moreShow less 11.1.211.2.011.2.111.3.012.0.012.0.112.1.012.2.012.2.112.2.212.3.013.0.013.0.113.1.013.1.113.1.213.1.313.2.06.8.5.10016.8.5.4016.8.5.4026.8.6.3016.8.6.6016.8.6.8016.8.7.16.8.7.1016.8.7.5016.8.7.5026.8.7.9016.8.8.10016.8.8.2016.8.8.5016.8.8.7016.8.8.8016.8.8.9016.8.9.16.8.9.1016.8.9.26.8.9.4016.8.9.5016.8.9.6017.0.0.17.0.0.107.0.0.1017.0.0.102	13.3.0
`github.com/chai2010/webp` Go From an advisory covering 2 CVEs	before 0.0.0-20250406010349-76805d5a8860	0.0.0-20250406010349-76805d5a8860
`github.com/chai2010/webp` Go From an advisory covering 2 CVEs	0.0.0 up to 1.1.2-0.20250406010349-76805d5a8860	1.1.2-0.20250406010349-76805d5a8860
`firefox` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_1	0:102.15.1-1.el8_1
`firefox-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_1	0:102.15.1-1.el8_1
`firefox-debugsource` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_1	0:102.15.1-1.el8_1
`firefox` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_8	0:102.15.1-1.el8_8
`firefox-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_8	0:102.15.1-1.el8_8
`firefox-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_8	0:102.15.1-1.el8_8
`thunderbird` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird` Red Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird-debuginfo` Red Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird-debugsource` Red Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`thunderbird` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird-debugsource` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird-debugsource` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird-debugsource` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox-debugsource` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox-debugsource` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`firefox-debugsource` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_2	0:102.15.1-1.el8_2
`thunderbird` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_1	0:102.15.1-1.el8_1
`thunderbird-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_1	0:102.15.1-1.el8_1
`thunderbird-debugsource` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_1	0:102.15.1-1.el8_1
`libwebp` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_6.1	0:1.0.0-7.el8_6.1
`libwebp-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_6.1	0:1.0.0-7.el8_6.1
`libwebp-debugsource` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_6.1	0:1.0.0-7.el8_6.1
`libwebp-devel` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_6.1	0:1.0.0-7.el8_6.1
`libwebp-java-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_6.1	0:1.0.0-7.el8_6.1
`libwebp-tools-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_6.1	0:1.0.0-7.el8_6.1
`libwebp` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-debugsource` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-devel` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-java-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-tools-debuginfo` Red Hat:rhel_aus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-debugsource` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-devel` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-java-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-tools-debuginfo` Red Hat:rhel_e4s:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-debugsource` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-devel` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-java-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`libwebp-tools-debuginfo` Red Hat:rhel_tus:8.2::appstream From an advisory covering 2 CVEs	before 0:1.0.0-7.el8_2.1	0:1.0.0-7.el8_2.1
`thunderbird` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`thunderbird-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`thunderbird` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`thunderbird-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`thunderbird` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`thunderbird-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`firefox` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox-debuginfo` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox-debugsource` Red Hat:rhel_aus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox-debuginfo` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox-debugsource` Red Hat:rhel_e4s:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox` Red Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox-debuginfo` Red Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox-debugsource` Red Hat:rhel_tus:8.4::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_4	0:102.15.1-1.el8_4
`firefox` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`firefox-debuginfo` Red Hat:enterprise_linux:7::client From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`firefox` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`firefox-debuginfo` Red Hat:enterprise_linux:7::server From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`firefox` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`firefox-debuginfo` Red Hat:enterprise_linux:7::workstation From an advisory covering 2 CVEs	before 0:102.15.1-1.el7_9	0:102.15.1-1.el7_9
`firefox` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_6	0:102.15.1-1.el8_6
`firefox-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_6	0:102.15.1-1.el8_6
`firefox-debugsource` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_6	0:102.15.1-1.el8_6
`firefox` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_2	0:102.15.1-1.el9_2
`firefox-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_2	0:102.15.1-1.el9_2
`firefox-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_2	0:102.15.1-1.el9_2
`firefox-x11` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_2	0:102.15.1-1.el9_2
`thunderbird` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_8	0:102.15.1-1.el8_8
`thunderbird-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_8	0:102.15.1-1.el8_8
`thunderbird-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_8	0:102.15.1-1.el8_8
`thunderbird` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_6	0:102.15.1-1.el8_6
`thunderbird-debuginfo` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_6	0:102.15.1-1.el8_6
`thunderbird-debugsource` Red Hat:rhel_eus:8.6::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_6	0:102.15.1-1.el8_6
`libwebp` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:1.2.0-6.el9_0	0:1.2.0-6.el9_0
`libwebp-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:1.2.0-6.el9_0	0:1.2.0-6.el9_0
`libwebp-debugsource` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:1.2.0-6.el9_0	0:1.2.0-6.el9_0
`libwebp-devel` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:1.2.0-6.el9_0	0:1.2.0-6.el9_0
`libwebp-java-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:1.2.0-6.el9_0	0:1.2.0-6.el9_0
`libwebp-tools-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:1.2.0-6.el9_0	0:1.2.0-6.el9_0
`firefox` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_0	0:102.15.1-1.el9_0
`firefox-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_0	0:102.15.1-1.el9_0
`firefox-debugsource` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_0	0:102.15.1-1.el9_0
`libwebp` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-devel` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-java-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-tools-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-debugsource` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-java-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-tools` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-tools-debuginfo` Red Hat:enterprise_linux:9::crb From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`thunderbird` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_0	0:102.15.1-1.el9_0
`thunderbird-debuginfo` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_0	0:102.15.1-1.el9_0
`thunderbird-debugsource` Red Hat:rhel_eus:9.0::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_0	0:102.15.1-1.el9_0
`thunderbird` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_2	0:102.15.1-1.el9_2
`thunderbird-debuginfo` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_2	0:102.15.1-1.el9_2
`thunderbird-debugsource` Red Hat:enterprise_linux:9::appstream From an advisory covering 2 CVEs	before 0:102.15.1-1.el9_2	0:102.15.1-1.el9_2
`libwebp` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:1.0.0-5.2.el8_1.1	0:1.0.0-5.2.el8_1.1
`libwebp-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:1.0.0-5.2.el8_1.1	0:1.0.0-5.2.el8_1.1
`libwebp-debugsource` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:1.0.0-5.2.el8_1.1	0:1.0.0-5.2.el8_1.1
`libwebp-devel` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:1.0.0-5.2.el8_1.1	0:1.0.0-5.2.el8_1.1
`libwebp-java-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:1.0.0-5.2.el8_1.1	0:1.0.0-5.2.el8_1.1
`libwebp-tools-debuginfo` Red Hat:rhel_e4s:8.1::appstream From an advisory covering 2 CVEs	before 0:1.0.0-5.2.el8_1.1	0:1.0.0-5.2.el8_1.1
`libwebp` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.0.0-8.el8_8.1	0:1.0.0-8.el8_8.1
`libwebp-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.0.0-8.el8_8.1	0:1.0.0-8.el8_8.1
`libwebp-debugsource` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.0.0-8.el8_8.1	0:1.0.0-8.el8_8.1
`libwebp-devel` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.0.0-8.el8_8.1	0:1.0.0-8.el8_8.1
`libwebp-java-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.0.0-8.el8_8.1	0:1.0.0-8.el8_8.1
`libwebp-tools-debuginfo` Red Hat:enterprise_linux:8::appstream From an advisory covering 2 CVEs	before 0:1.0.0-8.el8_8.1	0:1.0.0-8.el8_8.1
`thunderbird` Rocky Linux:8 From an advisory covering 2 CVEs	before 0:102.15.1-1.el8_8	0:102.15.1-1.el8_8
`libwebp` Rocky Linux:9 From an advisory covering 2 CVEs	before 0:1.2.0-7.el9_2	0:1.2.0-7.el9_2
`libwebp-sys2` crates.io From an advisory covering 2 CVEs	0.0.0-0 up to 0.1.8	0.1.8
`libwebp-sys` crates.io From an advisory covering 2 CVEs	0.0.0-0 up to 0.9.3	0.9.3
`cargo-audit-advisory-db` openSUSE:Tumbleweed	before 20231007-1.1	20231007-1.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected	OSV
Nov 3, 2026	facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2023-5129 has been rejected by its source and should not be treated as a live vulnerability, published September 12, 2023. Fixed in tiledb 2.17.4-r0.

References

Show 126 moreShow less

This page doesn't list everything

Left out here: 773 versions. The JSON record has them.