-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AIMiggo AIRoot Cause AnalysisThe vulnerability stems from libwebp's Huffman table construction. Multiple sources including CVE-2023-4863 description, libwebp's fix commit 902bc9190331343b2017211debcec8d2ab87e17a, and Chromium's bug report all point to BuildHuffmanTable as the vulnerable function. OpenCV's patch upgrades libwebp to 1.3.2 which contains the fix for this specific function. The file path is derived from libwebp's source structure within OpenCV's 3rdparty directory.
| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| opencv-python-headless | pip | >= 0, < 4.8.1.78 | 4.8.1.78 |
PythonPythonOngoing coverage of React2Shell