{"uuid": "1ec9ebe2-da9a-45d4-ba0a-b5b91dad53c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2023-4863", "type": "seen", "source": "https://t.me/xhqcankao/6249", "content": "\u4e25\u91cd\u7684 WebP \u9519\u8bef\uff1a\u4e0d\u4ec5\u4ec5\u662f\u6d4f\u89c8\u5668\u8bb8\u591a\u5e94\u7528\u90fd\u53d7\u5230\u5a01\u80c1\n\n\u8fd9\u4e2a\u65b0\u53d1\u73b0\u7684\u6f0f\u6d1e\uff0c\u88ab\u6807\u8bc6\u4e3aCVE-2023-4863\uff0c\u6d89\u53ca\u5230 WebP \u56fe\u50cf\u683c\u5f0f\u4e2d\u7684\u5806\u7f13\u51b2\u533a\u6ea2\u51fa\u3002Chrome \u548c Firefox \u7b49\u6d4f\u89c8\u5668\u4f7f\u7528 WebP \u6765\u8fdb\u884c\u9ad8\u6548\u7684\u56fe\u50cf\u538b\u7f29\u3002\u4f46\u4e0d\u4ec5\u4ec5\u662f\u6d4f\u89c8\u5668\u8bb8\u591a\u5e94\u7528\u90fd\u53d7\u6b64\u6f0f\u6d1e\u5f71\u54cd\uff0c\u53ea\u8981\u4f7f\u7528 libwebp \u5e93\u7684\u90fd\u6709\u3002\n\n\u56fe\u50cf\u67e5\u770b\u5668\uff1aHoneyview \u7248\u672c v5.51 (\u5df2\u4fee\u590d)\n\n\u958b\u6e90\u6846\u67b6\uff1aElectron \u7248\u672c v27.0.0-beta.2 (\u5df2\u4fee\u590d)\n\n\u5bc6\u7801\u7ba1\u7406\uff1a1Password for Mac \u7248\u672c 8.10.15 (\u5df2\u4fee\u590d)\n\nTelegram Desktop\uff1a\u7248\u672c v 4.9.7(\u5df2\u4fee\u590d)\n\n\u8bf7\u5c3d\u5feb\u66f4\u65b0\u5230\u4ee5\u4e0a\u65b0\u7248\u672c\u3002\n\n\u8bb8\u591a\u5e94\u7528\u7a0b\u5e8f\u4f7f\u7528 libwebp \u6765\u6e32\u67d3 WebP \u56fe\u50cf\uff0c\u4e0a\u9762\u5df2\u7ecf\u63d0\u5230\u4e86\u5176\u4e2d\u4e00\u4e9b\uff0c\u4f46\u8fd8\u6709\u77e5\u9053\u7684\u5176\u4ed6\u4e00\u4e9b\u5305\u62ec\uff1aAffinity(\u8bbe\u8ba1\u8f6f\u4ef6)\u3001Gimp\u3001Inkscape\u3001LibreOffice\u3001Telegram\u3001Thunderbird(\u73b0\u5df2\u4fee\u590d)\u3001ffmpeg\uff0c\u4ee5\u53ca\u8bb8\u591a\u7684 Android \u5e94\u7528\uff0c\u8fd8\u6709\u4f7f\u7528 Flutter \u6784\u5efa\u7684\u8de8\u5e73\u53f0\u5e94\u7528\u3002\n\n\u2014\u2014 Stack Diary", "creation_timestamp": "2026-08-24T13:00:03.025103Z"}