Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens, soft media users 1520111, Alejandro86 for the delivery of clues! CTOnews.com September 16 news, the United States National Institute of Standards and Technology (NIST) recently issued a security announcement, found that Google launched the WebP image format there is a heap buffer overflow vulnerability.

The vulnerability tracking number is CVE-2023-4863, and Google says it has found evidence that hackers have exploited the vulnerability.

This vulnerability is due to improper implementation of Huffman table in Webp logic processing, out-of-bounds writing problem in BuildHuffmanTable function and the possibility for an attacker to execute arbitrary code by constructing malicious data.

In addition to many browsers such as Chrome and Firefox, there are also problems with software that uses this technology, including Signal and 1Password.

CTOnews.com attached here is the browser version that has been repaired as follows:

Google: Chrome version 116.0.5846.187 (for Mac and Linux)

Chrome version 116.0.5845.187swap. 188 (for Windows)

Mozilla:Firefox 117.0.1

Firefox ESR 102.15.1

Firefox ESR 115.2.1

Thunderbird 102.15.1

Thunderbird 115.2.2

Microsoft: Edge version 116.0.1938.81

BraveBrave Browser version 1.57.64

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.