CVE-2023-4863

🗓️ 12 Sep 2023 14:24:59Reported by ChromeType

cve🔗 web.nvd.nist.gov📰️ 14 Media mentions👁 1574 Views

Heap buffer overflow in libwebp in Google Chrome

Reporter	Title	Published	Views	Family All 844
githubexploit	Exploit for Out-of-bounds Write in Google Chrome	13 May 202608:15	–	githubexploit
githubexploit	Exploit for Out-of-bounds Write in Google Chrome	21 Sep 202305:22	–	githubexploit
githubexploit	Exploit for Out-of-bounds Write in Google Chrome	11 Nov 202306:51	–	githubexploit
githubexploit	Exploit for Incorrect Authorization in Apple Macos	9 Apr 202414:53	–	githubexploit
githubexploit	Exploit for Integer Overflow or Wraparound in Apple Ipados	2 Nov 202312:56	–	githubexploit
githubexploit	Exploit for Out-of-bounds Write in Google Chrome	13 May 202618:50	–	githubexploit
githubexploit	Exploit for Out-of-bounds Write in Google Chrome	22 Apr 202615:32	–	githubexploit
githubexploit	Exploit for NULL Pointer Dereference in Gpac	28 Sep 202320:49	–	githubexploit
freebsd	electron22 -- multiple vulnerabilities	13 Sep 202300:00	–	freebsd
freebsd	graphics/webp heap buffer overflow	12 Sep 202300:00	–	freebsd

NVD

Vulners

Node

google chromeRange<116.0.5845.187

Node

fedoraproject fedoraMatch37

fedoraproject fedoraMatch38

fedoraproject fedoraMatch39

Node

debian debian_linuxMatch10.0

debian debian_linuxMatch11.0

debian debian_linuxMatch12.0

Node

mozilla firefoxRange<102.15.1esr

mozilla firefoxRange<117.0.1-

mozilla firefoxRange115.1.0–115.2.1esr

mozilla thunderbirdRange<102.15.1

mozilla thunderbirdRange115.0–115.2.2

Node

microsoft edge_chromiumRange<116.0.1938.81

microsoft teamsRange<1.6.00.26463macos

microsoft teamsRange<1.6.00.26474desktop

microsoft webp_image_extensionRange<1.0.62681.0

Node

webmproject libwebpRange<1.3.2

Node

netapp active_iq_unified_managerMatch-vmware_vsphere

Node

bentley seequent_leapfrogRange<2023.2

Node

bandisoft honeyviewRange<5.51

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "116.0.5845.187",
        "status": "affected",
        "lessThan": "116.0.5845.187",
        "versionType": "custom"
      }
    ]
  },
  {
    "vendor": "Google",
    "product": "libwebp",
    "versions": [
      {
        "version": "1.3.2",
        "status": "affected",
        "lessThan": "1.3.2",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
openwall	www.openwall.com/lists/oss-security/2023/09/26/1
sethmlarson	www.sethmlarson.dev/security-developer-in-residence-weekly-report-16
openwall	www.openwall.com/lists/oss-security/2023/09/22/4
openwall	www.openwall.com/lists/oss-security/2023/09/21/4
chromereleases	www.chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html
openwall	www.openwall.com/lists/oss-security/2023/09/22/6
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/
blog	www.blog.isosceles.com/the-webp-0day/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/
security	www.security.gentoo.org/glsa/202401-10

17 Jun 2026 06:38Current

8.5High risk

Vulners AI Score8.5

CVSS 3.18.8

EPSS0.99735

SSVC