NVD - CVE-2023-4863
nvd.nist.gov

Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

  • Bipta
    15•9 months ago

    As far as I’m aware this does affect Android and is not currently fixed. It’s expected to be fixed in the October security patch.

    This is just my memory of reading weeks ago. Someone else may know better.

      • Bipta
        4•9 months ago

        I believe the libwebp is implemented at the OS level. Again someone else may know better.

    • @TakingOnWater@lemmy.worldEnglish
      1•9 months ago

      So if the phone gets a security update for this at the OS level, should we theoretically be safe to use apps with any sort of browser functionality? Like some apps that don’t update, or are no longer being maintained, etc