应该是 webp 图像加载的内存溢出漏洞,目前已经修复。 看 chrome 的更新公告好像只影响到 beta 版本的 chrome ( We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel.)。 总之各位记得升级浏览器。
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1 https://nvd.nist.gov/vuln/detail/CVE-2023-4863
1
vvhy 2023-09-14 23:21:02 +08:00 1
好像不止是 chrome ,用了 libwebp 库的都受影响
|