[Release Notes](https://www.mozilla.org/en-US/firefox/118.0.1/releasenotes/)
firefox·FirefoxbyHal-5700X Firefox 118.1 releasedRelease Noteshttps://www.mozilla.org/en-US/security/advisories/mfsa2023-44/Open linkView original on lemmy.world127Comments3Reply
TwinHaelix reddthat.com2Hide 2 repliesFix is to address a critical CVE: Specific handling of an attacker-controlled VP8 media stream could lead to a heap buffer overflow in the content process. We are aware of this issue being exploited in other products in the wild. 14Reply
ppivot_root replylemmy.world1Hide 1 replyAny idea if it's the same root cause as CVE-2023-4863 (libwebp heap buffer overflow)? WEBP is a derivative of VP8, after all.2Reply
3 replies
Fix is to address a critical CVE:
Any idea if it's the same root cause as CVE-2023-4863 (libwebp heap buffer overflow)? WEBP is a derivative of VP8, after all.
It is apparently a new one in libvpx