https://stackdiary.com/critical-vulnerabili...-cve-2023-4863/

This may also affect image editing software such as Irfanview, Gimp and similar that may not have released patches yet:

https://irfanview-forum.de/forum/program/bu...-4863#post98121

https://www.gimp.org/

Some such programs may not feature automatic updates, so remember to look out for future patches, and maybe avoid open third party WebP images in them until then. Some really old programs may not support WebP in the first place, though.

Seems my copy of MS Edge had to be updated from within the browser itself. I was expecting Windows Update to handle that, but it seems to be bugged now for other reasons.

Oh well.

Seems IrfanView now has updated its WebP plugin, see link above.

Now GIMP also has a new patched version.