FAQ for Image I/O and libwebp: CVE-2023-41064, CVE-2023-4863 and CVE-2023-5129

The Tenable Security Response Team (SRT) has published a frequently asked questions blog post to provide clarity around multiple vulnerabilities affecting image processing frameworks and libraries including Image I/O and libwebp, including one flaw that is confirmed to have been exploited in the wild in zero-click attacks.

The vulnerabilities include flaws in Apple operating systems (CVE-2023-41064) and Google Chrome and other applications that use libwebp (CVE-2023-4863) as well as a recently assigned CVE, CVE-2023-5129, which was supposed to cover the broader usage of libwebp.

For more information about these vulnerabilities, including the availability of patches and Tenable product coverage, please visit our blog.