Critical Vulnerability: WebP Heap Buffer Overflow (CVE-2023-4863)

Huntress describes CVE-2023-4863, a critical heap buffer overflow in libwebp (fixed in libwebp 1.3.2) that can be triggered by crafted WebP lossless images and may lead to DoS or remote code execution; the team reproduced the original PoC, notes Google reports exploits in the wild, and recommends identifying and patching affected software (browsers, Electron apps, OS packages) promptly.