{"id":"CVE-2023-5129","aliases":["A-299477569","CVE-2023-4863","GHSA-j7hp-h8jx-5ppr","PYSEC-2026-1794","RUSTSEC-2023-0060","RUSTSEC-2023-0061"],"url":"https://o3.security/vulnerability/CVE-2023-5129","summary":null,"details":"In BuildHuffmanTable of huffman_utils.c, there is a possible out of bounds write due to a heap buffer overflow. This could lead to remote code execution with no additional execution privileges needed. User interaction is not needed for exploitation.","published":"2023-10-01T00:00:00Z","modified":"2026-10-23T16:03:44.105534497Z","cvss":null,"epss":null,"cisaKev":null,"exploitsKnown":null,"affectedPackages":[{"ecosystem":"Android","name":"platform/external/webp","fixedVersion":"14-next:2023-10-06"},{"ecosystem":"Android","name":"platform/external/webp","fixedVersion":"11:2023-10-06"},{"ecosystem":"Android","name":"platform/external/webp","fixedVersion":"12:2023-10-06"},{"ecosystem":"Android","name":"platform/external/webp","fixedVersion":"12L:2023-10-06"},{"ecosystem":"Android","name":"platform/external/webp","fixedVersion":"13:2023-10-06"}],"fix":null,"references":[{"type":"ADVISORY","url":"https://source.android.com/security/bulletin/2023-10-01"},{"type":"FIX","url":"https://android.googlesource.com/platform/external/webp/+/aeaf7afb3fdf4f33e499f429ba1af687e0eddca0"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2026-10-23T16:03:44.105534497Z"}}