The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvpxUpgrade libvpx-develUpgrade thunderbirdUpgrade firefox-x11Upgrade firefox | Oct 10, 2023 | Sep 28, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade libvpxUpgrade qt5-qtwebengine | Aug 22, 2024 | Sep 28, 2023 |
| Centos_linux | — | Upgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade firefoxUpgrade thunderbird | Oct 5, 2023 | Sep 28, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade chromiumUpgrade libvpxUpgrade firefox-esr | Oct 2, 2023 | Sep 28, 2023 |
| Freebsd | — | Upgrade libvpxUpgrade electron22Upgrade chromiumUpgrade qt6-webengineUpgrade electron24Upgrade electron25Upgrade ungoogled-chromium | Sep 29, 2023 | Sep 29, 2023 |
| Gentoo Linux | — | Upgrade www-client/google-chrome.Upgrade media-libs/libvpx.Upgrade www-client/chromium.Upgrade www-client/microsoft-edge. | Oct 5, 2023 | Sep 28, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 28, 2023 | Sep 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvpx | Mar 13, 2024 | Sep 28, 2023 |
| Mfsa2023 44 | — | Upgrade to Mozilla Firefox ESR version 115.3.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 118.0.1 | Sep 29, 2023 | Sep 28, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Oct 2, 2023 | Sep 29, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.3.1Upgrade to the latest version of Mozilla Thunderbird | Oct 2, 2023 | Sep 28, 2023 |
| Oracle_linux | — | Upgrade firefox-x11Upgrade thunderbirdUpgrade libvpx-develUpgrade firefoxUpgrade libvpx | Oct 5, 2023 | Sep 27, 2023 |
| Redhat_linux | — | Upgrade firefox-x11Upgrade libvpx-develUpgrade libvpx-utils-debuginfoUpgrade thunderbird-debugsourceNo solution existsUpgrade libvpx-debugsourceUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade firefox-debugsourceUpgrade libvpxUpgrade firefoxUpgrade thunderbirdUpgrade libvpx-debuginfo | Oct 5, 2023 | Sep 28, 2023 |
| Rocky_linux | — | Upgrade libvpxUpgrade libvpx-debugsourceUpgrade libvpx-debuginfoUpgrade libvpx-devel | Aug 15, 2024 | Sep 28, 2023 |
| Suse | — | Upgrade chromiumUpgrade MozillaFirefox-translations-otherUpgrade MozillaThunderbird-translations-commonUpgrade MozillaThunderbirdUpgrade vlc-jackUpgrade vlc-codec-gstreamerUpgrade vlc-opencvUpgrade MozillaFirefox-develUpgrade vlc-develUpgrade operaUpgrade vpx-toolsUpgrade libvpx7-32bitUpgrade libvpx4Upgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefox-translations-commonUpgrade vlc-qtUpgrade libvpx4-32bitUpgrade libvpx-develUpgrade libvlccore9Upgrade libvpx1Upgrade vlc-langUpgrade libvpx7Upgrade vlc-vdpauUpgrade vlc-noxUpgrade MozillaFirefoxUpgrade vlcUpgrade MozillaThunderbird-translations-otherUpgrade libvpx1-32bitUpgrade libvlc5Upgrade chromedriver | Oct 2, 2023 | Sep 28, 2023 |
| Ubuntu | — | Upgrade libvpx3 (Ubuntu Pro)Upgrade thunderbirdUpgrade firefoxUpgrade libvpx7Upgrade libvpx1 (Ubuntu Pro)Upgrade libvpx5 (Ubuntu Pro)Upgrade libvpx6 | Oct 3, 2023 | Sep 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub