NVD - CVE-2023-4863
nvd.nist.gov

Any Chromium and Firefox browser prior to version 116 will be vulnerable to this, update your browsers.

    • Bipta@kbin.social
      131·
      10 months ago

      As far as I’m aware this does affect Android and is not currently fixed. It’s expected to be fixed in the October security patch.

      This is just my memory of reading weeks ago. Someone else may know better.

      • 9point6@lemmy.worldEnglish
        61·
        10 months ago

        The Android webview is updated through the play store as of a few years ago

        • Bipta@kbin.social
          3·
          10 months ago

          I believe the libwebp is implemented at the OS level. Again someone else may know better.

      • TakingOnWater@lemmy.worldEnglish
        1·
        10 months ago

        So if the phone gets a security update for this at the OS level, should we theoretically be safe to use apps with any sort of browser functionality? Like some apps that don’t update, or are no longer being maintained, etc