CVE-2023-4863
HIGHCVSS 8.8/10Actively ExploitedEPSS 99.74%
Last modified
CVE-2023-4863 is a high-severity vulnerability rated 8.8/10 on the CVSS scale. Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical). CISA has confirmed active exploitation in the wild. EPSS estimates a 99.74% chance of exploitation in the next 30 days.
Description
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Chrome | < 116.0.5845.187 | |
| Fedoraproject | Fedora | 37 |
| Fedoraproject | Fedora | 38 |
| Fedoraproject | Fedora | 39 |
| Debian | Debian Linux | 10.0 |
| Debian | Debian Linux | 11.0 |
| Debian | Debian Linux | 12.0 |
| Mozilla | Firefox | < 102.15.1 |
| Mozilla | Firefox | < 117.0.1 |
| Mozilla | Firefox | >= 115.1.0, < 115.2.1 |
| Mozilla | Thunderbird | < 102.15.1 |
| Mozilla | Thunderbird | >= 115.0, < 115.2.2 |
| Microsoft | Edge Chromium | < 116.0.1938.81 |
| Microsoft | Teams | < 1.6.00.26463 |
| Microsoft | Teams | < 1.6.00.26474 |
| Microsoft | Webp Image Extension | < 1.0.62681.0 |
| Webmproject | Libwebp | < 1.3.2 |
| Netapp | Active Iq Unified Manager | All versions |
| Bentley | Seequent Leapfrog | < 2023.2 |
| Bandisoft | Honeyview | < 5.51 |
References
- https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/Third Party Advisory
- https://blog.isosceles.com/the-webp-0day/Exploit, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1215231Issue Tracking, Third Party Advisory
- https://crbug.com/1479274Issue Tracking, Vendor Advisory
- https://en.bandisoft.com/honeyview/history/Release Notes
- https://lists.debian.org/debian-lts-announce/2023/09/msg00015.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00016.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00017.htmlMailing List, Third Party Advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863Patch, Third Party Advisory
- https://news.ycombinator.com/item?id=37478403Exploit, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-4863Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/202309-05Third Party Advisory
- https://security.gentoo.org/glsa/202401-10Third Party Advisory
- https://security.netapp.com/advisory/ntap-20230929-0011/Third Party Advisory
- https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/Exploit, Third Party Advisory
- https://www.bentley.com/advisories/be-2023-0001/Third Party Advisory
- https://www.debian.org/security/2023/dsa-5496Mailing List
- https://www.debian.org/security/2023/dsa-5497Mailing List
- https://www.debian.org/security/2023/dsa-5498Mailing List, Third Party Advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/Third Party Advisory
- https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/Third Party Advisory
- https://blog.isosceles.com/the-webp-0day/Exploit, Third Party Advisory
- https://bugzilla.suse.com/show_bug.cgi?id=1215231Issue Tracking, Third Party Advisory
- https://crbug.com/1479274Issue Tracking, Vendor Advisory
- https://en.bandisoft.com/honeyview/history/Release Notes
- https://lists.debian.org/debian-lts-announce/2023/09/msg00015.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00016.htmlMailing List, Third Party Advisory
- https://lists.debian.org/debian-lts-announce/2023/09/msg00017.htmlMailing List, Third Party Advisory
- https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863Patch, Third Party Advisory
- https://news.ycombinator.com/item?id=37478403Exploit, Third Party Advisory
- https://security-tracker.debian.org/tracker/CVE-2023-4863Issue Tracking, Third Party Advisory
- https://security.gentoo.org/glsa/202309-05Third Party Advisory
- https://security.gentoo.org/glsa/202401-10Third Party Advisory
- https://security.netapp.com/advisory/ntap-20230929-0011/Third Party Advisory
- https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/Exploit, Third Party Advisory
- https://www.bentley.com/advisories/be-2023-0001/Third Party Advisory
- https://www.debian.org/security/2023/dsa-5496Mailing List
- https://www.debian.org/security/2023/dsa-5497Mailing List
- https://www.debian.org/security/2023/dsa-5498Mailing List, Third Party Advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/Third Party Advisory
- https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863Exploit, Third Party Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4863US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2023-4863?
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
How severe is CVE-2023-4863?
CVE-2023-4863 has a CVSS score of 8.8/10 (HIGH severity). The EPSS model estimates a 99.74% probability of exploitation in the next 30 days. This vulnerability is listed in CISA's Known Exploited Vulnerabilities catalog.
How do I fix CVE-2023-4863?
Check the vendor references and advisories linked above for patched versions and mitigation guidance. You can also run a Strix scan to test if your systems are affected.
Are you affected by CVE-2023-4863?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST