CVE-2023-4863

CVSS

—

EPSS

1.000 (100.0th percentile)

CISA KEV

Added 2023-09-13, due 2023-10-04

Exploitation

No report

Public exploits

14 repositories

State

Unknown

Coverage

• 

  ● Actively exploitedCritical 90Huntress◆Authoritative. Authoritative publisher: a primary source, or a newsroom with formal editorial standards28 Sept 2023, 00:00

  Critical Vuln: WebP Heap Buffer Overflow CVE-2023-4863 | Huntress

  Huntress is tracking a new critical vulnerability seen in the wild that affects anything using the libwebp WebP image library. Here’s what we know so far.

  ↗huntress.com/blog/critical-vulnerability-webp-h…(opens the publisher's site in a new tab)

What we observed

1. 24 Sept, 12:33poc publishedpoc-in-github
2. 24 Sept, 11:50kev addedcisa-kev