CVE-2023-4863: Critical Vulnerability in Widely Used libwebp Library

On September 7, 2023, Apple released emergency security updates to fix a buffer overflow vulnerability (CVE-2023-41064) impacting macOS, iOS, iPadOS, and watchOS products that was used in a zero-click exploitation chain by the NSO Group. Shortly after, on September 11, 2023, Google released an update to fix a buffer overflow vulnerability (CVE-2023-4863) in Google Chrome, … CVE-2023-4863: Critical Vulnerability in Widely Used libwebp Library

Article Link: CVE-2023-4863 | Arctic Wolf

1 post - 1 participant

Read full topic

apple buffer buffer overflow buffer overflow vulnerability click critical critical vulnerability cve cve-2023-41064 cve-2023-4863 emergency exploitation fix google ios ipados library libwebp macos nso nso group overflow products security security updates september september 11 update updates vulnerability watchos zero-click