Firetruck

CVE-2023-5217

KEV
Updated Oct 21, 2025 · PUBLISHED
View KEV entry →

Description

Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.

Full record on cve.org →

Affected packages

PackageVendor / ProductVersion rangeStatus
ChromeGoogle / Chrome>= 117.0.5938.132, < 117.0.5938.132affected
libvpxGoogle / libvpx>= 1.13.1, < 1.13.1affected