CVE-2023-4863
Assigner: Chrome
Published: 2023-09-12T14:24:59.275Z
State: PUBLISHED
affected: vendor: Google
product: Chrome
versions: version: 116.0.5845.187
status: affected
lessThan: 116.0.5845.187
versionType: custom
vendor: Google
product: libwebp
versions: version: 1.3.2
status: affected
lessThan: 1.3.2
versionType: custom
descriptions: value: Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
problemTypes: descriptions: description: Heap buffer overflow