Lucene search

K
nvd[email protected]NVD:CVE-2023-5217
HistorySep 28, 2023 - 4:15 p.m.

CVE-2023-5217

2023-09-2816:15:10
CWE-787
web.nvd.nist.gov
3
heap buffer overflow
remote attacker
google chrome
libvpx

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.248

Percentile

96.7%

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected configurations

NVD
Node
googlechromeRange<117.0.5938.132
OR
mozillafirefoxRange<118.0.1
OR
mozillafirefoxRange<118.1android
OR
mozillafirefox_esrRange<115.3.1
OR
mozillafirefox_focusRange<118.1android
AND
webmprojectlibvpxRange<1.13.1
Node
microsoftedgeMatch116.0.1938.98
OR
microsoftedgeMatch117.0.2045.47
OR
microsoftedge_chromiumMatch116.0.5845.229
OR
microsoftedge_chromiumMatch117.0.5938.132
Node
mozillafirefoxRange<118.0.1
OR
mozillafirefoxRange<118.1android
OR
mozillafirefox_esrRange<115.3.1
OR
mozillafirefox_focusRange<118.1android
OR
mozillathunderbirdRange<115.3.1
Node
fedoraprojectfedoraMatch37
OR
fedoraprojectfedoraMatch38
OR
fedoraprojectfedoraMatch39
Node
debiandebian_linuxMatch10.0
OR
debiandebian_linuxMatch11.0
OR
debiandebian_linuxMatch12.0
Node
appleipad_osRange17.0–17.0.3
OR
appleipad_osMatch16.7
OR
appleiphone_osRange17.0–17.0.3
OR
appleiphone_osMatch16.7

References

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

9.2

Confidence

High

EPSS

0.248

Percentile

96.7%