CVE-2023-5217

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-28

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected Platforms (CPE)

📦

Webmproject

Libvpx

< 1.13.1

📦

Microsoft

Edge

= 116.0.1938.98= 117.0.2045.47

📦

Microsoft

Edge Chromium

= 116.0.5845.229= 117.0.5938.132

📦

Mozilla

Firefox

< 115.3.1< 118.0.1< 118.1

References & Advisories

🔗 http://seclists.org/fulldisclosure/2023/Oct/12

🔗 http://seclists.org/fulldisclosure/2023/Oct/16

🔗 http://www.openwall.com/lists/oss-security/2023/09/28/5

🔗 http://www.openwall.com/lists/oss-security/2023/09/28/6

🔗 http://www.openwall.com/lists/oss-security/2023/09/29/1

🔗 http://www.openwall.com/lists/oss-security/2023/09/29/11

🔗 http://www.openwall.com/lists/oss-security/2023/09/29/12

🔗 http://www.openwall.com/lists/oss-security/2023/09/29/14