Notice on potential impact of a heap buffer overflow vulnerability in libwebp (WebP) towards Ricoh products and services
| Vulnerability Information ID | ricoh-2023-000003 |
| Version | 1.00E |
| CVE ID(CWE ID) | CVE-2023-4863 ( CWE-787 ) |
| CVSSv3 score | 8.8 (HIGH) |
Ricoh understands the importance of security and is committed to managing its products and services with the most advanced security technologies possible for its customers worldwide.
Ricoh is aware of the reported "Heap buffer overflow vulnerability in libwebp (WebP)"(CVE-2023-4863).
Heap buffer overflow allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
The impact on Ricoh products and services are currently under investigation. Updates on impacted products and services and related countermeasures will be provided promptly on this page as they become available.
| About Ricoh |
Ricoh is a leading provider of integrated digital services and print and imaging solutions designed to support digital transformation of workplaces, workspaces and optimize business performance.
Headquartered in Tokyo, Ricoh’s global operation reaches customers in approximately 200 countries and regions, supported by cultivated knowledge, technologies, and organizational capabilities nurtured over its 85-year history. In the financial year ended March 2023, Ricoh Group had worldwide sales of 2,134 billion yen (approx. 16.0 billion USD).
It is Ricoh’s mission and vision to empower individuals to find Fulfillment through Work by understanding and transforming how people work so we can unleash their potential and creativity to realize a sustainable future.
For further information, please visit www.ricoh.com
Contacts:
Ricoh Europe.
media@ricoh-europe.com