Critical WebP bug: many apps, not just browsers, under threat

[baka]

Critical WebP bug: many apps, not just browsers, under threat

A significant vulnerability in the WebP Codec has been unearthed, prompting major browser vendors, including Google and Mozilla, to expedite the release

stackdiary.com

 

[MoralTG]

What does it mean tho

 

[baka]

What does it mean tho

WebP 0-day means that there is a previously unknown and unpatched security vulnerability in software or systems that handle WebP images, and this vulnerability is actively being exploited by attacker by crafting malicious WebP images and getting victims to open them, attackers could leverage this bug to execute arbitrary code and access sensitive user data.

To give you an idea of how much this is, here is a short list of common apps that are impacted by this:

• 1Password
• Bitwarden
• CrashPlan
• Discord
• GitHub Desktop
• GitKraken
• Keybase
• Logitech Options+
• Microsoft Teams
• MongoDB Compass
• Mullvad
• Signal
• Skype
• Slack
• Termius
• TIDAL
• Twitch
• Visual Studio Code