CVE-2023-4863

🔥 Known Exploited (CISA KEV)HIGH

8.8

CVSS Severity Score

EPSS Score0.0000%

EPSS Percentile0.00th

Published2023-09-12

Last Modified2026-06-17

Data SourcesNVDCISA KEV

Vulnerability Description

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Affected Platforms (CPE)

📦

Google

Chrome

< 116.0.5845.187

💻

Fedoraproject

Fedora

= 37= 38= 39

💻

Debian

Debian Linux

= 10.0= 11.0= 12.0

📦

Mozilla

Firefox

< 102.15.1< 117.0.1>= 115.1.0 and < 115.2.1

References & Advisories

🔗 http://www.openwall.com/lists/oss-security/2023/09/21/4

🔗 http://www.openwall.com/lists/oss-security/2023/09/22/1

🔗 http://www.openwall.com/lists/oss-security/2023/09/22/3

🔗 http://www.openwall.com/lists/oss-security/2023/09/22/4

🔗 http://www.openwall.com/lists/oss-security/2023/09/22/5

🔗 http://www.openwall.com/lists/oss-security/2023/09/22/6

🔗 http://www.openwall.com/lists/oss-security/2023/09/22/7

🔗 http://www.openwall.com/lists/oss-security/2023/09/22/8