---
id: 7254
title: "Critical vulnerabilities in media libraries exploited in the wild: everything you need to know"
source_domain: wiz.io
source_url: "https://www.wiz.io/blog/cve-2023-4863-and-cve-2023-5217-exploited-in-the-wild"
published_at: "2023-10-01T13:31:06Z"
tags: ["vulnerability", "exploited-in-the-wild", "libwebp", "libvpx", "cve-2023-4863", "cve-2023-5217"]
phying_url: "https://phying.com/item/7254"
lang: en
---

# Critical vulnerabilities in media libraries exploited in the wild: everything you need to know

## Summary

Wiz examines CVE-2023-4863 (libwebp) and CVE-2023-5217 (libvpx), both exploited in the wild: mostly client-side, but build environments and image/video servers need priority patching.

## Intelligence Metadata

- **Sources:** wiz.io
- **Published:** 2023-10-01T13:31:06Z
- **Original:** https://www.wiz.io/blog/cve-2023-4863-and-cve-2023-5217-exploited-in-the-wild
- **Phying News:** https://phying.com/item/7254