RHBA-2023%3A5988 | Vulnetix

RHBA-2023%3A5988 PUBLISHED CVSS 9.600000381469727 CRITICAL

Record from redhat · Published October 23, 2023

A heap-based buffer flaw was found in the way libwebp, a library used to process "WebP" image format data, processes certain specially formatted WebP images. An attacker could use this flaw to crash or execute remotely arbitrary code in an application such as a web browser compiled with this library.

Risk scores

CVSS 3.1

9.600000381469727

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

Affected products

Vendor	Product	Versions
Red Hat	rhel9/firefox-flatpak@sha256:ef71228c905275b0c973e231942a1949b2036217cf0ed7e671ea1a9dded66fbd_amd64 as a component of Red Hat Enterprise Linux AppStream (v. 9)	*

Timeline

Oct 23, 2023 CVE Published
Nov 21, 2025 CVE Updated
May 1, 2026 Security Advisory (2 in total, the first dated here)

Query this with the API

The same record, from the CLI:

vulnetix vdb vuln RHBA-2023%3A5988
vulnetix vdb fixes RHBA-2023%3A5988

Or with curl, using the org id and key from your account page:

curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
  "https://api.vdb.vulnetix.com/v2/vuln/RHBA-2023%253A5988/fixes/registry"

The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart

References

Look up in the Resolve Platform →