https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-03T00:34:39.716741+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-pillow-cve-2023-4863 BREW-pillow-CVE-2023-4863 — libwebp: OOB write in BuildHuffmanTable 2026-10-03T00:34:40.688291+00:00

Affected: Homebrew: pillow

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

 https://cve.radiocsirt.org/vuln/certfr-2023-avi-0820 certfr-2023-avi-0820 — De multiples vulnérabilités ont été découvertes dans <span class="textit">les produits ElasticSearch</span>. Elles perm… 2026-10-03T00:34:40.688353+00:00 certfr-2023-avi-0820 https://cve.radiocsirt.org/vuln/cnvd-2023-73247 cnvd-2023-73247 2026-10-03T00:34:40.688373+00:00 cnvd-2023-73247 https://cve.radiocsirt.org/vuln/fkie_cve-2023-5129 fkie_cve-2023-5129 2026-10-03T00:34:40.688387+00:00

Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering Authority. Duplicate of CVE-2023-4863.

 https://cve.radiocsirt.org/vuln/ghsa-hhrh-69hc-fgg7 GHSA-hhrh-69hc-fgg7 2026-10-03T00:34:40.688408+00:00

With a specially crafted WebP lossless file, libwebp may write data out of bounds to the heap.

The ReadHuffmanCodes() function allocates the HuffmanCode buffer with a size that comes from an array of precomputed sizes: kTableSize. The color_cache_bits value defines which size to use.

The kTableSize array only takes into account sizes for 8-bit first-level table lookups but not second-level table lookups. libwebp allows codes that are up to 15-bit (MAX_ALLOWED_CODE_LENGTH). When BuildHuffmanTable() attempts to fill the second-level tables it may write data out-of-bounds. The OOB write to the undersized array happens in ReplicateValue.

 https://cve.radiocsirt.org/vuln/gsd-2023-5129 gsd-2023-5129 2026-10-03T00:34:40.688429+00:00 gsd-2023-5129 https://cve.radiocsirt.org/vuln/opensuse-su-2024:13304-1 openSUSE-SU-2024:13304-1 — cargo-audit-advisory-db-20231007-1.1 on GA media 2026-10-03T00:34:40.688440+00:00

cargo-audit-advisory-db-20231007-1.1 on GA media

 https://cve.radiocsirt.org/vuln/rhsa-2023:5183 RHSA-2023:5183 — Red Hat Security Advisory: firefox security update 2026-10-03T00:34:40.688456+00:00

libwebp: Heap buffer overflow in WebP Codec libwebp: out-of-bounds write with a specially crafted WebP lossless file

 https://cve.radiocsirt.org/vuln/rustsec-2023-0060 RUSTSEC-2023-0060 — libwebp: OOB write in BuildHuffmanTable 2026-10-03T00:34:40.688473+00:00

Affected: crates.io: libwebp-sys2

[Google](https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html) and [Mozilla](https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/) have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild.

libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable".

 https://cve.radiocsirt.org/vuln/wid-sec-w-2023-2305 WID-SEC-W-2023-2305 — Google Chrome / Microsoft Edge: Schwachstelle ermöglicht Codeausführung 2026-10-03T00:34:40.688494+00:00

Ein entfernter, anonymer Angreifer kann eine Schwachstelle in Google Chrome / Microsoft Edge ausnutzen, um beliebigen Programmcode auszuführen.