CVE-2023-5217 KEV

Description

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Scoring

CISA KEV

Affected (11)

References

• http://seclists.org/fulldisclosure/2023/Oct/12
• http://seclists.org/fulldisclosure/2023/Oct/16
• http://www.openwall.com/lists/oss-security/2023/09/28/5
• http://www.openwall.com/lists/oss-security/2023/09/28/6
• http://www.openwall.com/lists/oss-security/2023/09/29/1
• http://www.openwall.com/lists/oss-security/2023/09/29/11
• http://www.openwall.com/lists/oss-security/2023/09/29/12
• http://www.openwall.com/lists/oss-security/2023/09/29/14
• http://www.openwall.com/lists/oss-security/2023/09/29/2
• http://www.openwall.com/lists/oss-security/2023/09/29/7
• http://www.openwall.com/lists/oss-security/2023/09/29/9
• http://www.openwall.com/lists/oss-security/2023/09/30/1
• http://www.openwall.com/lists/oss-security/2023/09/30/2
• http://www.openwall.com/lists/oss-security/2023/09/30/3
• http://www.openwall.com/lists/oss-security/2023/09/30/4
• http://www.openwall.com/lists/oss-security/2023/09/30/5
• http://www.openwall.com/lists/oss-security/2023/10/01/1
• http://www.openwall.com/lists/oss-security/2023/10/01/2
• http://www.openwall.com/lists/oss-security/2023/10/01/5
• http://www.openwall.com/lists/oss-security/2023/10/02/6