Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical) ...

The image format is supported by more than a dozen graphic design tools along with productivity applications such as LibreOffice. The WebP security flaw is tracked as CVE-2023-4863.