ByteOS Network

CVE Vulnerability Details :

CVE-2023-4863

PUBLISHED

More Info Official Page

Assigner-Chrome

Assigner Org ID-ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28

View Known Exploited Vulnerability (KEV) details

Published At-12 Sep, 2023 | 14:24

Updated At-21 Oct, 2025 | 23:05

▼CVE Numbering Authority (CNA)

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Affected Products

Vendor

Google LLC

Product

Chrome

Versions

Affected

From 116.0.5845.187 before 116.0.5845.187 (custom)

Vendor

Google LLC

Product

libwebp

Versions

Affected

From 1.3.2 before 1.3.2 (custom)

Problem Types

Type	CWE ID	Description
N/A	N/A	Heap buffer overflow

Type: N/A

CWE ID: N/A

Description: Heap buffer overflow

References

Hyperlink	Resource
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html	N/A
https://crbug.com/1479274	N/A
https://en.bandisoft.com/honeyview/history/	N/A
https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/	N/A
https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/	N/A
https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a	N/A
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863	N/A
https://security-tracker.debian.org/tracker/CVE-2023-4863	N/A
https://bugzilla.suse.com/show_bug.cgi?id=1215231	N/A
https://news.ycombinator.com/item?id=37478403	N/A
https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/	N/A
https://www.debian.org/security/2023/dsa-5496	N/A
https://www.debian.org/security/2023/dsa-5497	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/	N/A
https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/	N/A
https://www.debian.org/security/2023/dsa-5498	N/A
https://security.gentoo.org/glsa/202309-05	N/A
https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/	N/A
https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/	N/A
https://github.com/webmproject/libwebp/releases/tag/v1.3.2	N/A
https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/	N/A
http://www.openwall.com/lists/oss-security/2023/09/21/4	N/A
https://blog.isosceles.com/the-webp-0day/	N/A
http://www.openwall.com/lists/oss-security/2023/09/22/1	N/A
http://www.openwall.com/lists/oss-security/2023/09/22/3	N/A
http://www.openwall.com/lists/oss-security/2023/09/22/4	N/A
http://www.openwall.com/lists/oss-security/2023/09/22/5	N/A
http://www.openwall.com/lists/oss-security/2023/09/22/8	N/A
http://www.openwall.com/lists/oss-security/2023/09/22/7	N/A
http://www.openwall.com/lists/oss-security/2023/09/22/6	N/A
http://www.openwall.com/lists/oss-security/2023/09/26/1	N/A
http://www.openwall.com/lists/oss-security/2023/09/26/7	N/A
http://www.openwall.com/lists/oss-security/2023/09/28/1	N/A
http://www.openwall.com/lists/oss-security/2023/09/28/2	N/A
http://www.openwall.com/lists/oss-security/2023/09/28/4	N/A
https://security.netapp.com/advisory/ntap-20230929-0011/	N/A
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/	N/A
https://sethmlarson.dev/security-developer-in-residence-weekly-report-16	N/A
https://www.bentley.com/advisories/be-2023-0001/	N/A
https://security.gentoo.org/glsa/202401-10	N/A

Hyperlink: https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html

Resource: N/A

Hyperlink: https://crbug.com/1479274

Resource: N/A

Hyperlink: https://en.bandisoft.com/honeyview/history/

Resource: N/A

Hyperlink: https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/

Resource: N/A

Hyperlink: https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/

Resource: N/A

Hyperlink: https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a

Resource: N/A

Hyperlink: https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863

Resource: N/A

Hyperlink: https://security-tracker.debian.org/tracker/CVE-2023-4863

Resource: N/A

Hyperlink: https://bugzilla.suse.com/show_bug.cgi?id=1215231

Resource: N/A

Hyperlink: https://news.ycombinator.com/item?id=37478403

Resource: N/A

Hyperlink: https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/

Resource: N/A

Hyperlink: https://www.debian.org/security/2023/dsa-5496

Resource: N/A

Hyperlink: https://www.debian.org/security/2023/dsa-5497

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/

Resource: N/A

Hyperlink: https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/

Resource: N/A

Hyperlink: https://www.debian.org/security/2023/dsa-5498

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/202309-05

Resource: N/A

Hyperlink: https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/

Resource: N/A

Hyperlink: https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/

Resource: N/A

Hyperlink: https://github.com/webmproject/libwebp/releases/tag/v1.3.2

Resource: N/A

Hyperlink: https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/21/4

Resource: N/A

Hyperlink: https://blog.isosceles.com/the-webp-0day/

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/1

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/3

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/4

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/5

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/8

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/7

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/22/6

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/26/1

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/26/7

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/28/1

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/28/2

Resource: N/A

Hyperlink: http://www.openwall.com/lists/oss-security/2023/09/28/4

Resource: N/A

Hyperlink: https://security.netapp.com/advisory/ntap-20230929-0011/

Resource: N/A

Hyperlink: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/

Resource: N/A

Hyperlink: https://sethmlarson.dev/security-developer-in-residence-weekly-report-16

Resource: N/A

Hyperlink: https://www.bentley.com/advisories/be-2023-0001/

Resource: N/A

Hyperlink: https://security.gentoo.org/glsa/202401-10

Resource: N/A

▼Authorized Data Publishers (ADP)

1. CVE Program Container

References

Hyperlink	Resource
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html	x_transferred
https://crbug.com/1479274	x_transferred
https://en.bandisoft.com/honeyview/history/	x_transferred
https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/	x_transferred
https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/	x_transferred
https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a	x_transferred
https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863	x_transferred
https://security-tracker.debian.org/tracker/CVE-2023-4863	x_transferred
https://bugzilla.suse.com/show_bug.cgi?id=1215231	x_transferred
https://news.ycombinator.com/item?id=37478403	x_transferred
https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/	x_transferred
https://www.debian.org/security/2023/dsa-5496	x_transferred
https://www.debian.org/security/2023/dsa-5497	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/	x_transferred
https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/	x_transferred
https://www.debian.org/security/2023/dsa-5498	x_transferred
https://security.gentoo.org/glsa/202309-05	x_transferred
https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/	x_transferred
https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/	x_transferred
https://github.com/webmproject/libwebp/releases/tag/v1.3.2	x_transferred
https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/21/4	x_transferred
https://blog.isosceles.com/the-webp-0day/	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/1	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/3	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/4	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/5	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/8	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/7	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/22/6	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/26/1	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/26/7	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/28/1	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/28/2	x_transferred
http://www.openwall.com/lists/oss-security/2023/09/28/4	x_transferred
https://security.netapp.com/advisory/ntap-20230929-0011/	x_transferred
https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/	x_transferred
https://sethmlarson.dev/security-developer-in-residence-weekly-report-16	x_transferred
https://www.bentley.com/advisories/be-2023-0001/	x_transferred
https://security.gentoo.org/glsa/202401-10	x_transferred
https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863	N/A