CVE-2023-4863

Google Chromium WebP Heap-Based Buffer Overflow

8.8 HIGHActively exploited (CISA KEV)Public exploitEPSS 100.0%

Published12 Sept 2023
Added to CISA KEV13 Sept 2023
Remediation due4 Oct 2023

Description

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVSS 3.1 breakdown

Attack vectorNetwork

Attack complexityLow

Privileges requiredNone

User interactionRequired

ScopeUnchanged

ConfidentialityHigh

IntegrityHigh

AvailabilityHigh

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Affected products

Bandisoft Honeyview< 5.51

Bentley Seequent Leapfrog< 2023.2

Google Chrome< 116.0.5845.187

Microsoft Edge Chromium< 116.0.1938.81

Microsoft Teams< 1.6.00.26474 · < 1.6.00.26463

Microsoft Webp Image Extension< 1.0.62681.0

Mozilla Firefox< 117.0.1 · ≥ 115.1.0 < 115.2.1 · < 102.15.1

Mozilla Thunderbird≥ 115.0 < 115.2.2 · < 102.15.1

Netapp Active Iq Unified Managerall versions

Webmproject Libwebp< 1.3.2

Debian Linux10.0 · 11.0 · 12.0

Fedoraproject Fedora37 · 38 · 39

Remediation

Fixed in

Bandisoft Honeyview≥ 5.51

Bentley Seequent Leapfrog≥ 2023.2

Google Chrome≥ 116.0.5845.187

Microsoft Edge Chromium≥ 116.0.1938.81

Microsoft Teams≥ 1.6.00.26474

Microsoft Webp Image Extension≥ 1.0.62681.0

Mozilla Firefox≥ 117.0.1

Mozilla Thunderbird≥ 115.2.2

Webmproject Libwebp≥ 1.3.2

Patch & vendor advisories

References

https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/Third Party Advisory
https://blog.isosceles.com/the-webp-0day/ExploitThird Party Advisory
https://bugzilla.suse.com/show_bug.cgi?id=1215231Issue TrackingThird Party Advisory
https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.htmlVendor Advisory
https://crbug.com/1479274Issue TrackingVendor Advisory
https://en.bandisoft.com/honeyview/history/Release Notes
https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17aPatch
https://github.com/webmproject/libwebp/releases/tag/v1.3.2Release Notes
https://lists.debian.org/debian-lts-announce/2023/09/msg00015.htmlMailing ListThird Party Advisory
https://lists.debian.org/debian-lts-announce/2023/09/msg00016.htmlMailing ListThird Party Advisory

and 37 more references

Related CVEs

Recent high-severity vulnerabilities sharing a weakness type.

Frequently asked

Is CVE-2023-4863 being actively exploited?

Yes. CVE-2023-4863 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added 13 Sept 2023.

How severe is CVE-2023-4863?

CVE-2023-4863 has a CVSS 3.1 base score of 8.8, rated high. EPSS estimates a 100.0% probability of exploitation.

Which products are affected by CVE-2023-4863?

Affected products include Bandisoft Honeyview, Bentley Seequent Leapfrog, Google Chrome, Microsoft Edge Chromium, Microsoft Teams, and 7 more.

How do I fix CVE-2023-4863?

Upgrade affected software to a fixed version, for example Bandisoft Honeyview 5.51, Bentley Seequent Leapfrog 2023.2, Google Chrome 116.0.5845.187 or later, then confirm no affected versions remain in your inventory.

How Secuno handles this

Secuno correlates vulnerabilities like CVE-2023-4863 against the real software inventory on every managed device, every day. Rather than a static severity, each match is scored in context: exploit availability, EPSS, the asset's exposure, and business criticality decide where it lands in the queue. Because it is on the CISA KEV list, Secuno flags any affected asset as top-priority automatically. If an affected version is present anywhere across your portfolio, it surfaces automatically with a prioritised remediation path.

See how prioritisation works Book a demo

Running Microsoft 365?

Patching is one half. Scan your domain and check MFA, legacy authentication, admin roles and mail forwarding in two minutes, with a fix for every gap.

Run the free Microsoft 365 check

Data from the NVD, CISA KEV catalog and FIRST EPSS. CVSS 3.1 base score shown where available.