Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwebpUpgrade libwebp-develUpgrade libwebp-toolsUpgrade firefox-x11Upgrade thunderbirdUpgrade firefox | Sep 25, 2023 | Sep 12, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade chromiumUpgrade libwebpUpgrade qt5-qtwebengineUpgrade qt5-qtimageformats | Mar 26, 2024 | Sep 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade qt5-qtimageformatsUpgrade qt5-qtimageformats-docUpgrade libwebp12-javaUpgrade libwebp12-debuginfoUpgrade thunderbird-debuginfoUpgrade libwebp12Upgrade qt5-qtimageformats-debuginfoUpgrade firefox-debuginfoUpgrade firefoxUpgrade libwebp12-develUpgrade libwebp12-toolsUpgrade thunderbird | Oct 18, 2023 | Sep 12, 2023 |
| Amazon_linux_2023 | — | Upgrade libwebp-develUpgrade libwebp-debugsourceUpgrade libwebp-tools-debuginfoUpgrade libwebp-java-debuginfoUpgrade libwebp-toolsUpgrade libwebpUpgrade libwebp-javaUpgrade libwebp-debuginfo | Feb 17, 2025 | Sep 11, 2023 |
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Sep 19, 2023 | Sep 12, 2023 |
| Debian | — | Upgrade firefox-esrUpgrade chromiumUpgrade thunderbirdUpgrade libwebp | Sep 15, 2023 | Sep 12, 2023 |
| Fortinet Forticlient | — | Update Fortinet FortiClient to the latest version | Jul 15, 2025 | Jan 14, 2025 |
| Fortinet Forticlientems | — | Upgrade Fortinet FortiClientEMS to the latest version | Jan 15, 2025 | Jan 14, 2025 |
| Freebsd | — | Upgrade electron25Upgrade electron24Upgrade ungoogled-chromiumUpgrade webpUpgrade tor-browserUpgrade electron22Upgrade chromium | Sep 21, 2023 | Sep 21, 2023 |
| Gentoo Linux | — | Upgrade www-client/firefox.Upgrade www-client/firefox-bin.Upgrade media-libs/libwebp. | Sep 18, 2023 | Sep 12, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 12, 2023 | Sep 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwebp | Feb 12, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwebp | Mar 13, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Mfsa2023 40 | — | Upgrade to Mozilla Firefox ESR version 115.2.1Upgrade to Mozilla Firefox ESR version 102.15.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 117.0.1 | Sep 14, 2023 | Sep 12, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Sep 13, 2023 | Sep 12, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.2.2Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 102.15.1 | Sep 13, 2023 | Sep 12, 2023 |
| Oracle_linux | — | Upgrade libwebp-develUpgrade thunderbirdUpgrade firefox-x11Upgrade libwebp-toolsUpgrade libwebpUpgrade firefox | Sep 19, 2023 | Sep 11, 2023 |
| Redhat_linux | — | Upgrade libwebp-debuginfoUpgrade firefox-debugsourceUpgrade libwebp-java-debuginfoUpgrade thunderbird-debugsourceUpgrade libwebpUpgrade firefox-x11Upgrade libwebp-debugsourceNo solution existsUpgrade firefox-debuginfoUpgrade libwebp-toolsUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbirdUpgrade libwebp-tools-debuginfoUpgrade libwebp-devel | Sep 19, 2023 | Sep 12, 2023 |
| Rocky_linux | — | Upgrade libwebpUpgrade libwebp-debuginfoUpgrade firefox-debuginfoUpgrade libwebp-tools-debuginfoUpgrade firefox-debugsourceUpgrade libwebp-toolsUpgrade thunderbird-debuginfoUpgrade libwebp-debugsourceUpgrade thunderbird-debugsourceUpgrade firefoxUpgrade thunderbirdUpgrade libwebp-devel | Mar 5, 2024 | Sep 12, 2023 |
| Suse | — | Upgrade libwebpmux2-32bitUpgrade libwebpdecoder2Upgrade libwebp7-32bitUpgrade libwebpmux1Upgrade libwebp-devel-32bitUpgrade MozillaThunderbird-translations-commonUpgrade libwebpextras0-32bitUpgrade libwebpdemux1Upgrade chromiumUpgrade MozillaThunderbird-translations-otherUpgrade MozillaFirefox-develUpgrade libwebpdecoder3Upgrade MozillaThunderbirdUpgrade libwebp-develUpgrade seamonkey-ircUpgrade MozillaFirefox-translations-otherUpgrade libwebp7Upgrade libwebpmux2Upgrade chromedriverUpgrade mozillafirefox-branding-upstreamUpgrade libwebpdecoder3-32bitUpgrade libwebp6Upgrade seamonkeyUpgrade libwebp6-32bitUpgrade seamonkey-dom-inspectorUpgrade libwebpmux3Upgrade libwebpdemux2Upgrade libwebpdemux2-32bitUpgrade libwebp-toolsUpgrade libwebp5Upgrade libwebpextras0Upgrade MozillaFirefoxUpgrade libwebpdecoder2-32bitUpgrade MozillaFirefox-translations-commonUpgrade libwebpmux3-32bitUpgrade libwebp5-32bitUpgrade libwebpdecoder1 | Sep 14, 2023 | Sep 13, 2023 |
| Ubuntu | — | Upgrade libwebpdemux2Upgrade firefoxUpgrade libwebpmux3Upgrade libwebp6 (Ubuntu Pro)Upgrade libwebp6Upgrade libwebp7Upgrade libwebpdemux2 (Ubuntu Pro)Upgrade libwebpmux3 (Ubuntu Pro)Upgrade thunderbird | Sep 18, 2023 | Sep 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 12, 2023 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | Jan 20, 2025 | Sep 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub