https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-14T16:54:15.157444+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/brew-pillow-cve-2023-4863 BREW-pillow-CVE-2023-4863 — libwebp: OOB write in BuildHuffmanTable 2026-10-14T16:54:15.253213+00:00

Affected: Homebrew: pillow

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

 https://cve.radiocsirt.org/vuln/cve-2023-4863 CVE-2023-4863 2026-10-14T16:54:15.253265+00:00

Affected: Google Chrome, Google libwebp

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

 https://cve.radiocsirt.org/vuln/pysec-2026-1794 PYSEC-2026-1794 — libwebp: OOB write in BuildHuffmanTable 2026-10-14T16:54:15.253297+00:00

Affected: PyPI: pillow

Heap buffer overflow in libwebp allow a remote attacker to perform an out of bounds memory write via a crafted HTML page.

 https://cve.radiocsirt.org/vuln/rustsec-2023-0060 RUSTSEC-2023-0060 — libwebp: OOB write in BuildHuffmanTable 2026-10-14T16:54:15.253318+00:00

Affected: crates.io: libwebp-sys2

[Google](https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html) and [Mozilla](https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/) have released security advisories for RCE due to heap overflow in libwebp. Google warns the vulnerability has been exploited in the wild.

libwebp needs to be updated to 1.3.2 to include a patch for "OOB write in BuildHuffmanTable".