Related Vulnerabilities: CVE-2023-4863  

DescriptionA vulnerability was found in libwebp. Following security issue located within the "BuildHuffmanTable" function, which serves the purpose of data accuracy verification. The vulnerability arises when the function allocates additional memory if the existing table size is insufficient for valid data. In practical security issue occurs when opening a malicious WebP image that could lead to a heap buffer overflow in the content process.A vulnerability was found in libwebp. Following security issue located within the "BuildHuffmanTable" function, which serves the purpose of data accuracy verification. The vulnerability arises when the function allocates additional memory if the existing table size is insufficient for valid data. In practical security issue occurs when opening a malicious WebP image that could lead to a heap buffer overflow in the content process.

Affected Packages and Issued Red Hat Security Errata

Unless explicitly stated as not affected, all previous versions of packages in any minor update stream of a product listed here should be assumed vulnerable, although may not have been subject to full analysis.