Dervishe the Grey on Nostr: "The shortcoming, assigned the identifier CVE-2023-4863, is a heap buffer overflow ...

"The shortcoming, assigned the identifier CVE-2023-4863, is a heap buffer overflow flaw in the WebP image format that could result in arbitrary code execution when processing a specially crafted image."

https://thehackernews.com/2023/09/mozilla-rushes-to-patch-webp-critical.html