8.8

CVE-2023-4863: Google Chromium WebP Heap-Based Buffer Overflow Vulnerability

CVSS: 8.8v3.1HighKEVAnalyzed
AliasesALPINE-CVE-2023-4863MGASA-2023-0282SUSE-SU-2023:3609-1
Published 12-09-2023Last modified 21-10-2025
Open JSON

Vulnerability summary

CVE-2023-4863 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in Google Chromium WebP. It is known to be exploited: CISA lists it, first on 13-09-2023. EPSS estimates a 99.98% chance of exploitation in the next 30 days, higher than 99.9% of scored vulnerabilities. 5 public exploits are recorded.

Overall risk
85/100
0100
Critical · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
99.98%
0%100%
Critical · 0.00 pp in 30 days
KEVListedCISA
RansomwareNone recordedNo known use recorded
Public exploits5reference

Advisory lineage

Upstream 0 · Downstream 30 · Related 15
MGASA-2023-0266MGASA-2023-0283OPENSUSE-SU-2024:13232-1OPENSUSE-SU-2024:13270-1OPENSUSE-SU-2024:13484-1OPENSUSE-SU-2024:14572-1

Timeline

  1. 12-09-2023
    PublishedVulnerability first disclosed.
  2. 13-09-2023
    Added to CISA KEVGoogle Chromium WebP Heap-Based Buffer Overflow Vulnerability
  3. 04-10-2023
    CISA remediation dueApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
  4. 21-10-2025
    Last modifiedVulnerability information updated.

Description

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

CVSS metrics

13 scores · 13 sources · 1 version

EPSS trend

Probability

99.98%

Chance of exploitation in the next 30 days

Percentile

100%

Versus all other CVEs

30-day change

0.00 pp

From 99.98% on 19-09-2026

19-09-202619-10-2026
EPSS score
99.98%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
13-09-2023
Federal due date
04-10-2023

CISA required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable. chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1 nvd.nist.gov/vuln/detail/CVE-2023-4863

Public exploits

5 found
  • referenceUnverified

    Exploit Reference (stackdiary.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (news.ycombinator.com)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (blog.isosceles.com)

    Maturity: unknown

Show all 5 exploits
  • referenceUnverified

    Exploit Reference (sethmlarson.dev)

    Maturity: unknown

  • referenceUnverified

    Exploit Reference (vicarius.io)

    Maturity: unknown

Weaknesses

CWE · root cause

Affected systems

Suse46 products
  • chromium&distro=SUSE Package Hub 15 SP4< 116.0.5845.187-bp155.2.31.1 | < 116.0.5845.187-bp155.2.34.1
  • chromium&distro=SUSE Package Hub 15 SP5< 116.0.5845.187-bp155.2.31.1 | < 116.0.5845.187-bp155.2.34.1
  • libwebp&distro=HPE Helion OpenStack 8< 0.4.3-4.15.1
  • libwebp&distro=SUSE Enterprise Storage 7.1< 1.0.3-150200.3.10.1
  • libwebp&distro=SUSE Linux Enterprise High Performance Computing 15 SP1-LTSS< 0.5.0-150000.3.14.1
Opensuse18 products
  • afl&distro=openSUSE Tumbleweed< 5.00c-1.1
  • cargo-audit-advisory-db&distro=openSUSE Tumbleweed< 20231007-1.1
  • chromium&distro=openSUSE Leap 15.4< 116.0.5845.187-bp155.2.31.1 | < 116.0.5845.187-bp155.2.34.1
  • chromium&distro=openSUSE Leap 15.5< 116.0.5845.187-bp155.2.31.1 | < 116.0.5845.187-bp155.2.34.1
  • chromium&distro=openSUSE Tumbleweed< 116.0.5845.187-1.1
NuGet7 products
  • magick.net-q16-anycpu< 13.3.0
  • magick.net-q16-hdri-anycpu< 13.3.0
  • magick.net-q16-x64< 13.3.0
  • magick.net-q8-anycpu< 13.3.0
  • magick.net-q8-openmp-x64< 13.3.0
Redhat6 products
  • libwebp< 0:1.0.0-7.el8_4.1
  • libwebp-debuginfo< 0:1.0.0-7.el8_4.1
  • libwebp-debugsource< 0:1.0.0-7.el8_4.1
  • libwebp-devel< 0:1.0.0-7.el8_4.1
  • libwebp-java-debuginfo< 0:1.0.0-7.el8_4.1
Debian5 products
  • chromium< 117.0.5938.62-1
  • firefox-esr< 115.2.1esr-1 | < 102.15.1esr-1~deb11u1 | < 102.15.1esr-1~deb12u1 | < 102.15.1esr-1~deb10u1
  • libwebp< 1.2.4-0.3 | < 1.2.4-0.2+deb12u1 | < 0.6.1-2.1+deb11u2 | < 0.6.1-2+deb10u3
  • thunderbird< 1:115.2.2-1 | < 1:102.15.1-1~deb11u1 | < 1:102.15.1-1~deb12u1 | < 1:102.15.1-1~deb10u1
  • debian_linuxEOL10.0 | 11.0 | 12.0
Crates.Io3 products
  • libwebp-sys< 0.9.3 | ≥ 0.0.0-0, < 0.9.3
  • libwebp-sys2< 0.1.8 | ≥ 0.0.0-0, < 0.1.8
  • webp< 0.2.6
Microsoft3 products
Ubuntu3 products
  • firefox< 117.0.1+build2-0ubuntu0.20.04.1
  • libwebp< 0.6.1-2ubuntu0.20.04.3 | < 1.2.2-2ubuntu0.22.04.2 | < 0.6.1-2ubuntu0.18.04.2+esm1
  • thunderbird< 1:102.15.1+build1-0ubuntu0.20.04.1 | < 1:102.15.1+build1-0ubuntu0.22.04.1
Chainguard2 products
  • firefox-esr< 117.0.1-r0
  • libwebp< 1.3.1-r2
Google2 products
  • chrome≥ 116.0.5845.187, < 116.0.5845.187 | < 116.0.5845.187
  • libwebp≥ 1.3.2, < 1.3.2
Mageia2 products
  • libwebp< 1.1.0-2.2.mga8
  • libwebp< 1.3.0-2.1.mga9
Mozilla2 products
  • firefox< 102.15.1 | < 117.0.1 | ≥ 115.1.0, < 115.2.1
  • thunderbird< 102.15.1 | ≥ 115.0, < 115.2.2
Alpine1 product
  • libwebp< 1.2.2-r2 | < 1.2.3-r2 | < 1.2.4-r3 | < 1.3.1-r1
Bandisoft1 product
Bentley1 product
Fedoraproject1 product
Github.com/chai20101 product
  • webp≥ 1.1.2, < 1.4.0 | < 0.0.0-20250406010349-76805d5a8860 | ≥ 0.0.0, < 1.1.2-0.20250406010349-76805d5a8860
Netapp1 product
Npm1 product
  • electron≥ 22.0.0, < 22.3.24 | ≥ 24.0.0, < 24.8.3 | ≥ 25.0.0, < 25.8.1 | ≥ 26.0.0, < 26.2.1 | ≥ 27.0.0-beta.1, < 27.0.0-beta.2
PyPI1 product
  • pillow< 10.0.1
Webmproject1 product
Wolfi1 product
  • libwebp< 1.3.1-r2

22 vendors · 109 products

References

118 links
Show all 100 references

Showing 100 of 118. Use Open JSON for the complete list.