Crumb
c/firefox · by hal_5700X@lemmy.world · 2y

Firefox 118.1 released

https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/

Release Notes

127 points · 3 comments · view on lemmy.world

3 Comments

TwinHaelix@reddthat.com · 14 pts · 2y (2 replies)

Fix is to address a critical CVE:

Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild.

pivot_root@lemmy.world · 2 pts · 2y (1 reply)

Any idea if it's the same root cause as CVE-2023-4863 (libwebp heap buffer overflow)? WEBP is a derivative of VP8, after all.

Audacity9961@feddit.ch · 4 pts · 2y

It is apparently a new one in libvpx