Is AION BRE is impacted by the libwebp and libvpx vulnerabilities. CVE ID: CVE-2023-4863

Products

• Aion Business Rules Expert

Issue/Introduction

Want to confirm if AION BRE is impacted by the libwebp and libvpx vulnerabilities.

CVE Synopsis: 

Heap buffer overflow in libwebp in Google Chrome and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.

Environment

Release : 11.0

Resolution

Broadcom R&D confirms that there is no impact due to the vulnerabilities noted in CVE ID: CVE-2023-4863 and AION product line