home.social
Sign in Create account

#cve202341061 — Public Fediverse posts

Live and recent posts from across the Fediverse tagged #cve202341061, aggregated by home.social.

  1. d0pp3l6ang3r :verified: :donor: @[email protected] ·

    Good Morning, story so far on the next log4j level #vulnerability #CVE20234863 #CVE20235129
    #0day #Chrome #iOS

    • libwebp library is vulnerable to heap overflow and can lead to RCE.
    • Apple assigned #CVE202341064 and #CVE202341061. Also actively exploited by #blastpass
    • #Google assigned #CVE20235129 for Chrome 0day and also exploited
    • Millions of apps and software use this library. See list sofar in 🧵
    • #CVE20235129 was rejected by NVD earlier due to all this confusion of several vendors assigning CVEs affecting their products
    • This will lead to vulnerability scanners not being able to correctly identify if your assets are affected with libwebp. #infosec #sectoot
    #cve20234863 #cve20235129 #0day #chrome #ios #cve202341064