Google LibWebP Arbitrary Code Execution Vulnerability (CVE-2023-5129) Notification

Overview Recently, NSFOCUS CERT found that Google officially fixed a heap buffer overflow vulnerability (CVE-2023-4863). Due to a flaw in the WebP module, an attacker triggered the vulnerability by inducing users to visit a malicious website, which ultimately led to arbitrary code execution on the target system. At present, it has been detected that the […]

The post Google LibWebP Arbitrary Code Execution Vulnerability (CVE-2023-5129) Notification appeared first on NSFOCUS, Inc., a global network and cyber security leader, protects enterprises …

arbitrary code attacker blog buffer buffer overflow buffer overflow vulnerability cert code code execution cve cve-2023-4863 cve-2023-5129 emergency-response flaw found google heap buffer overflow led libwebp malicious malicious website notification overflow system target ultimately vulnerability webp website