CVE-2023-4863None

CVE-2023-4863 Impact of libwebp Vulnerability CVE-2023-4863

Published
October 2, 2023
Last Modified
October 2, 2023

🔗 CVE IDs covered (1)

CVE-2023-4863 →

📋 Description

The Palo Alto Networks Product Security Assurance team has evaluated the recently disclosed critical libwebp vulnerability (CVE-2023-4863) as it relates to our products. While PAN-OS 10.2 and later versions include this library, PAN-OS software does not offer any scenarios required for the successful exploitation of this vulnerability and is not impacted. No other Palo Alto Networks products are known to contain the vulnerable library and be impacted by this issue at this time.

🎯 Affected products1

  • PAN-OS

✅ Remediation

No software updates are required at this time. Workarounds and mitigations: Customers with a Threat Prevention subscription can block attacks for this vulnerability by enabling Threat ID 94394 (Applications and Threats content update 8757).

🔗 References (1)