Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwebp-develUpgrade libwebpUpgrade firefox-x11Upgrade libwebp-toolsUpgrade thunderbirdUpgrade firefox | Sep 25, 2023 | Sep 12, 2023 |
| Alpine Linux | — | Upgrade qt5-qtimageformatsUpgrade chromiumUpgrade firefox-esrUpgrade libwebpUpgrade qt5-qtwebengine | Mar 26, 2024 | Sep 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libwebp12-javaUpgrade libwebp12-debuginfoUpgrade qt5-qtimageformats-docUpgrade qt5-qtimageformatsUpgrade thunderbirdUpgrade libwebp12Upgrade firefoxUpgrade libwebp12-develUpgrade qt5-qtimageformats-debuginfoUpgrade libwebp12-toolsUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | Oct 18, 2023 | Sep 12, 2023 |
| Amazon_linux_2023 | — | Upgrade libwebp-debugsourceUpgrade libwebp-develUpgrade libwebp-tools-debuginfoUpgrade libwebp-javaUpgrade libwebpUpgrade libwebp-java-debuginfoUpgrade libwebp-toolsUpgrade libwebp-debuginfo | Feb 17, 2025 | Sep 11, 2023 |
| Centos_linux | — | Upgrade firefoxUpgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade thunderbird | Sep 19, 2023 | Sep 12, 2023 |
| Debian | — | Upgrade libwebpUpgrade chromiumUpgrade firefox-esrUpgrade thunderbird | Sep 15, 2023 | Sep 12, 2023 |
| Fortinet Forticlient | — | Update Fortinet FortiClient to the latest version | Jul 15, 2025 | Jan 14, 2025 |
| Fortinet Forticlientems | — | Upgrade Fortinet FortiClientEMS to the latest version | Jan 15, 2025 | Jan 14, 2025 |
| Freebsd | — | Upgrade tor-browserUpgrade electron22Upgrade webpUpgrade chromiumUpgrade electron24Upgrade electron25Upgrade ungoogled-chromium | Sep 21, 2023 | Sep 21, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade media-libs/libwebp. | Sep 18, 2023 | Sep 12, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 12, 2023 | Sep 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwebp | Feb 12, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwebp | Mar 13, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Mfsa2023 40 | — | Upgrade to Mozilla Firefox ESR version 102.15.1Upgrade to Mozilla Firefox ESR version 115.2.1Upgrade to Mozilla Firefox version 117.0.1Upgrade to the latest version of Mozilla Firefox | Sep 14, 2023 | Sep 12, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Sep 13, 2023 | Sep 12, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 102.15.1Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 115.2.2 | Sep 13, 2023 | Sep 12, 2023 |
| Oracle_linux | — | Upgrade libwebpUpgrade firefoxUpgrade thunderbirdUpgrade libwebp-toolsUpgrade firefox-x11Upgrade libwebp-devel | Sep 19, 2023 | Sep 11, 2023 |
| Redhat_linux | — | Upgrade firefoxUpgrade libwebp-tools-debuginfoUpgrade thunderbirdUpgrade libwebp-develUpgrade thunderbird-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-x11Upgrade libwebpUpgrade libwebp-toolsUpgrade firefox-debuginfoUpgrade libwebp-java-debuginfoUpgrade libwebp-debuginfoUpgrade firefox-debugsourceUpgrade libwebp-debugsourceNo solution exists | Sep 19, 2023 | Sep 12, 2023 |
| Rocky_linux | — | Upgrade firefox-debuginfoUpgrade libwebp-tools-debuginfoUpgrade libwebpUpgrade thunderbird-debuginfoUpgrade libwebp-toolsUpgrade libwebp-debuginfoUpgrade firefox-debugsourceUpgrade libwebp-debugsourceUpgrade thunderbird-debugsourceUpgrade thunderbirdUpgrade firefoxUpgrade libwebp-devel | Mar 5, 2024 | Sep 12, 2023 |
| Suse | — | Upgrade libwebpextras0-32bitUpgrade libwebp7Upgrade chromiumUpgrade libwebp-devel-32bitUpgrade libwebpmux2Upgrade libwebp7-32bitUpgrade MozillaFirefox-develUpgrade libwebpdemux1Upgrade seamonkey-ircUpgrade libwebpmux1Upgrade MozillaThunderbird-translations-otherUpgrade MozillaThunderbirdUpgrade chromedriverUpgrade libwebpdecoder3Upgrade libwebpmux2-32bitUpgrade libwebpdecoder2Upgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade libwebp-develUpgrade mozillafirefox-branding-upstreamUpgrade libwebpdemux2-32bitUpgrade libwebpdecoder3-32bitUpgrade libwebpdemux2Upgrade libwebp5Upgrade libwebp6-32bitUpgrade libwebpextras0Upgrade libwebpdecoder1Upgrade MozillaFirefox-translations-commonUpgrade libwebpmux3-32bitUpgrade libwebpmux3Upgrade seamonkey-dom-inspectorUpgrade libwebp5-32bitUpgrade libwebp6Upgrade seamonkeyUpgrade libwebpdecoder2-32bitUpgrade MozillaFirefoxUpgrade libwebp-tools | Sep 14, 2023 | Sep 13, 2023 |
| Ubuntu | — | Upgrade libwebp7Upgrade libwebp6Upgrade libwebp6 (Ubuntu Pro)Upgrade libwebpmux3 (Ubuntu Pro)Upgrade libwebpdemux2 (Ubuntu Pro)Upgrade thunderbirdUpgrade libwebpdemux2Upgrade libwebpmux3Upgrade firefox | Sep 18, 2023 | Sep 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 12, 2023 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | Jan 20, 2025 | Sep 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub