Mozilla has released emergency security updates to address a critical zero-day vulnerability known as CVE-2023-4863, which allows for crashes or arbitrary code execution when malicious WebP images are opened, affecting various versions of Firefox and Thunderbird as well as other software that uses the vulnerable WebP code library, including Google Chrome.
View full story…