Huge security breach affects Chrome, Firefox, Brave, Edge, and plenty more apps besides - here's what you need to know

Date:
Thu, 14 Sep 2023 10:00:00 +0000

Description:
A vulnerability in the WebP codec allowing for malicious code execution is being exploited en-masse.

FULL STORY ======================================================================

Theres a major security flaw concerning many of the best browsers and other apps that you must address as soon as possible to prevent hackers from attacking your device.

The vulnerability, which is being tracked as CVE-2023-4863, is caused by a heap buffer overflow in the WebP code library (libwebp) and can lead to your system crashing or arbitrary code execution when exploited.

Affected applications include Chrome , Firefox , Brave , and Edge , along
with other programs like Telegram , Thunderbird , and Gimp . "Very bad"

Most Chromium-based browsers have rolled out their updates, including the
four mentioned above, while others expected to be issuing patches soon. We'd advise you to keep an eye out for update notifications and to apply your browser patch(es) as soon as possible.

Heap buffer overflow allows an attacker to flood an area of a systems memory with malicious activity, in turn allowing them to take control of a device, obtain data, or simply spread malware.

Alex Ivanovs of Stack Diary , who, alongside a in-depth technical explanation of the flaw, also noted that the vulnerability has affected more than just browsers, noticed that Apple has patched macOS Ventura to address the flaw with version 13.5.2.

Apple's Security Engineering and Architecture (SEAR) team and the University of Toronto Munk Schools Citizen Lab are credited with first reporting the bug on September 6th.

Failure to update could result in damage being done to a victims machine and even the loss of personal data. More from TechRadar Pro Downloaded something suspicious? Here are the best malware removal tools to get rid of anything dodgy Keep your devices behind the best firewall for an extra layer of protection New Google Chrome browser security plan slammed by experts



======================================================================
Link to news story: https://www.techradar.com/pro/security/huge-security-breach-affects-chrome-fir efox-brave-edge-and-plenty-more-apps-besides-heres-what-you-need-to-know


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)