NVD - CVE-2023-4863
nvd.nist.gov

Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

  • Bipta@kbin.social
    161·
    9 months ago

    As far as I’m aware this does affect Android and is not currently fixed. It’s expected to be fixed in the October security patch.

    This is just my memory of reading weeks ago. Someone else may know better.

    • 9point6@lemmy.worldEnglish
      101·
      9 months ago

      The Android webview is updated through the play store as of a few years ago

      • Bipta@kbin.social
        4·
        9 months ago

        I believe the libwebp is implemented at the OS level. Again someone else may know better.

    • TakingOnWater@lemmy.worldEnglish
      1·
      9 months ago

      So if the phone gets a security update for this at the OS level, should we theoretically be safe to use apps with any sort of browser functionality? Like some apps that don’t update, or are no longer being maintained, etc