VULNRABLE / Vulnerability / CVE-2023-4863

CVE-2023-4863

UNKNOWN ACT NOW pillow OSV ⚠ KEV — known exploited

Exploit verdict: CISA KEV-listed · EPSS 1.00 (≥50%)

CVSS Score

—

Severity

UNKNOWN

EPSS

100%

Source

OSV

Summary

libwebp: OOB write in BuildHuffmanTable

What this means

CVE-2023-4863 is a unknown-severity vulnerability affecting pillow. The EPSS model estimates a 100% probability of exploitation in the next 30 days. It appears on CISA's Known Exploited Vulnerabilities (KEV) catalog, meaning active exploitation has been observed — prioritise remediation. Published July 7, 2026.

View full advisory at OSV →