Firetruck

CVE-2023-4863

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ChromeGoogle / Chrome>= 116.0.5845.187, < 116.0.5845.187affected
libwebpGoogle / libwebp>= 1.3.2, < 1.3.2affected