Google gives WebP library heap buffer overflow a critical score, but NIST rates it as high-severity

The vulnerability — CVE-2023-5129 — was given a critical 10.0 CVSS score by Google and a high-severity 8.8 score by NIST.

buffer buffer overflow critical cve cve-2023-5129 cvss google heap buffer overflow high library nist overflow patchconfiguration-management score severity vulnerability vulnerability management webp