OMGeeky/advisory-db
1
0
Fork 0
mirror of https://github.com/OMGeeky/advisory-db.git synced 2025-12-27 23:08:06 +01:00
Code Issues Packages Projects Releases Wiki Activity

Update info about CVE-2023-5129 (#1793)

Browse Source
This commit is contained in:
Kornel
2023-09-26 14:50:50 +01:00
committed by GitHub
parent 8c5609f192
commit b2af5ad856
2 changed files with 4 additions and 4 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
crates/libwebp-sys/RUSTSEC-2023-0061.md
View File

@@ -5,7 +5,7 @@ package = "libwebp-sys"
date = "2023-09-12"
categories = ["memory-corruption"]
keywords = ["webp"]
aliases = ["CVE-2023-4863"]
aliases = ["CVE-2023-5129", "CVE-2023-4863"]
[versions]
patched = [">= 0.9.3"]
@@ -15,4 +15,4 @@ patched = [">= 0.9.3"]
[Google](https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html) and [Mozilla](https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/) have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild.
libwebp needs to be updated to include a patch for "OOB write in BuildHuffmanTable".
libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable".

4
crates/libwebp-sys2/RUSTSEC-2023-0060.md
View File

@@ -5,7 +5,7 @@ package = "libwebp-sys2"
date = "2023-09-12"
categories = ["memory-corruption"]
keywords = ["webp"]
aliases = ["CVE-2023-4863"]
aliases = ["CVE-2023-5129", "CVE-2023-4863"]
[versions]
patched = [">= 0.1.8"]
@@ -15,4 +15,4 @@ patched = [">= 0.1.8"]
[Google](https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html) and [Mozilla](https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/) have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild.
libwebp needs to be updated to include a patch for "OOB write in BuildHuffmanTable".
libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable".