Lucene search
K
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Support
Settings
Sign in

CVE-2023-4863

🗓️ 12 Sep 2023 15:15:24Reported by [email protected]Type 
nvd
 nvd🔗 web.nvd.nist.gov👁 20 Views

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page

Related
Detection
Refs
ReporterTitlePublishedViews
Family
GithubExploit		Exploit for Out-of-bounds Write in Google Chrome
13 May 202608:15
–githubexploit
GithubExploit		Exploit for Out-of-bounds Write in Google Chrome
21 Sep 202305:22
–githubexploit
GithubExploit		Exploit for Out-of-bounds Write in Google Chrome
11 Nov 202306:51
–githubexploit
GithubExploit		Exploit for Incorrect Authorization in Apple Macos
9 Apr 202414:53
–githubexploit
GithubExploit		Exploit for Integer Overflow or Wraparound in Apple Ipados
2 Nov 202312:56
–githubexploit
GithubExploit		Exploit for Out-of-bounds Write in Google Chrome
13 May 202618:50
–githubexploit
GithubExploit		Exploit for Out-of-bounds Write in Google Chrome
22 Apr 202615:32
–githubexploit
GithubExploit		Exploit for NULL Pointer Dereference in Gpac
28 Sep 202320:49
–githubexploit
FreeBSD		electron22 -- multiple vulnerabilities
13 Sep 202300:00
–freebsd
FreeBSD		graphics/webp heap buffer overflow
12 Sep 202300:00
–freebsd
Rows per page
NVD
Node
googlechromeRange<116.0.5845.187
Node
fedoraprojectfedoraMatch37
OR
fedoraprojectfedoraMatch38
OR
fedoraprojectfedoraMatch39
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
OR
debiandebian_linuxMatch12.0
Node
mozillafirefoxRange<102.15.1esr
OR
mozillafirefoxRange<117.0.1-
OR
mozillafirefoxRange115.1.0–115.2.1esr
OR
mozillathunderbirdRange<102.15.1
OR
mozillathunderbirdRange115.0–115.2.2
Node
microsoftedge_chromiumRange<116.0.1938.81
OR
microsoftteamsRange<1.6.00.26463macos
OR
microsoftteamsRange<1.6.00.26474desktop
OR
microsoftwebp_image_extensionRange<1.0.62681.0
Node
webmprojectlibwebpRange<1.3.2
Node
netappactive_iq_unified_managerMatch-vmware_vsphere
Node
bentleyseequent_leapfrogRange<2023.2
Node
bandisofthoneyviewRange<5.51
SourceLink
openwallwww.openwall.com/lists/oss-security/2023/09/28/2
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/
openwallwww.openwall.com/lists/oss-security/2023/09/28/4
githubwww.github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a
bleepingcomputerwww.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/
listswww.lists.fedoraproject.org/archives/list/[email protected]/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/
securitywww.security.gentoo.org/glsa/202401-10
chromereleaseswww.chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html
enwww.en.bandisoft.com/honeyview/history/
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

Book a live demo
24 Oct 2025 14:07Current
9.1High risk
Vulners AI Score9.1
CVSS 3.18.8
EPSS0.93301
CWE-787
heap buffer overflowlibwebpgoogle chromeremote attackerout of bounds memory writecrafted html pageseverity critical
20