Microsoft Webp Image Extension vulnerabilities

2 known vulnerabilities affecting microsoft/webp_image_extension.

Total CVEs

2

CISA KEV

1

actively exploited

Public exploits

0

Exploited in wild

1

Severity breakdown

HIGH1MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-4863HIGHCVSS 8.8KEVfixed in 1.0.62681.02023-09-12

CVE-2023-4863 [HIGH] CWE-787 CVE-2023-4863: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVE-2020-17102MEDIUMCVSS 5.5fixed in 1.0.32731.0vN/A2020-11-11

CVE-2020-17102 [MEDIUM] CVE-2020-17102: WebP Image Extensions Information Disclosure Vulnerability WebP Image Extensions Information Disclosure Vulnerability