libwebp: OOB write in BuildHuffmanTable
Date: 2023-09
Affected: go/github.com/chai2010/webp, go/github.com/chai2010/webp, go/github.com/chai2010/webp
Attack vector: other
Category: vulnerability-disclosure
Severity: High
CVE: CVE-2023-4863
CWE: CWE-787
CVSS: 8.8 (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.


Mitigations:

Architectural layers (MAESTRO):