Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libwebpUpgrade libwebp-develUpgrade thunderbirdUpgrade firefox-x11Upgrade libwebp-toolsUpgrade firefox | Sep 25, 2023 | Sep 12, 2023 |
| Alpine Linux | — | Upgrade libwebpUpgrade qt5-qtwebengineUpgrade firefox-esrUpgrade chromiumUpgrade qt5-qtimageformats | Mar 26, 2024 | Sep 12, 2023 |
| Amazon Linux Ami 2 | — | Upgrade libwebp12-debuginfoUpgrade qt5-qtimageformatsUpgrade libwebp12-javaUpgrade qt5-qtimageformats-docUpgrade firefox-debuginfoUpgrade libwebp12-develUpgrade qt5-qtimageformats-debuginfoUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade thunderbirdUpgrade libwebp12-toolsUpgrade libwebp12 | Oct 18, 2023 | Sep 12, 2023 |
| Amazon_linux_2023 | — | Upgrade libwebp-java-debuginfoUpgrade libwebp-toolsUpgrade libwebpUpgrade libwebp-debuginfoUpgrade libwebp-javaUpgrade libwebp-debugsourceUpgrade libwebp-tools-debuginfoUpgrade libwebp-devel | Feb 17, 2025 | Sep 11, 2023 |
| Centos_linux | — | Upgrade thunderbirdUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade firefox-debuginfo | Sep 19, 2023 | Sep 12, 2023 |
| Debian | — | Upgrade chromiumUpgrade firefox-esrUpgrade thunderbirdUpgrade libwebp | Sep 15, 2023 | Sep 12, 2023 |
| Fortinet Forticlient | — | Update Fortinet FortiClient to the latest version | Jul 15, 2025 | Jan 14, 2025 |
| Fortinet Forticlientems | — | Upgrade Fortinet FortiClientEMS to the latest version | Jan 15, 2025 | Jan 14, 2025 |
| Freebsd | — | Upgrade chromiumUpgrade tor-browserUpgrade webpUpgrade electron22Upgrade electron24Upgrade electron25Upgrade ungoogled-chromium | Sep 21, 2023 | Sep 21, 2023 |
| Gentoo Linux | — | Upgrade media-libs/libwebp.Upgrade www-client/firefox-bin.Upgrade www-client/firefox. | Sep 18, 2023 | Sep 12, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 12, 2023 | Sep 11, 2023 |
| Huawei Euleros 2_0_sp10 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp11 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp5 | — | Upgrade libwebp | Feb 12, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libwebp | Mar 13, 2024 | Sep 12, 2023 |
| Huawei Euleros 2_0_sp9 | — | Upgrade libwebp | Jan 10, 2024 | Sep 12, 2023 |
| Mfsa2023 40 | — | Upgrade to Mozilla Firefox version 117.0.1Upgrade to Mozilla Firefox ESR version 115.2.1Upgrade to Mozilla Firefox ESR version 102.15.1 | Sep 14, 2023 | Sep 12, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Sep 13, 2023 | Sep 12, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 102.15.1Upgrade to Mozilla Thunderbird version 115.2.2 | Sep 13, 2023 | Sep 12, 2023 |
| Oracle_linux | — | Upgrade thunderbirdUpgrade firefox-x11Upgrade libwebp-toolsUpgrade libwebp-develUpgrade firefoxUpgrade libwebp | Sep 19, 2023 | Sep 11, 2023 |
| Redhat_linux | — | Upgrade libwebp-develUpgrade libwebp-tools-debuginfoUpgrade firefoxUpgrade thunderbirdUpgrade firefox-x11No solution existsUpgrade libwebp-java-debuginfoUpgrade libwebpUpgrade thunderbird-debuginfoUpgrade libwebp-debugsourceUpgrade firefox-debuginfoUpgrade libwebp-debuginfoUpgrade libwebp-toolsUpgrade thunderbird-debugsourceUpgrade firefox-debugsource | Sep 19, 2023 | Sep 12, 2023 |
| Rocky_linux | — | Upgrade thunderbird-debuginfoUpgrade libwebpUpgrade firefox-debugsourceUpgrade libwebp-toolsUpgrade libwebp-debuginfoUpgrade libwebp-tools-debuginfoUpgrade firefox-debuginfoUpgrade libwebp-develUpgrade thunderbird-debugsourceUpgrade firefoxUpgrade libwebp-debugsourceUpgrade thunderbird | Mar 5, 2024 | Sep 12, 2023 |
| Suse | — | Upgrade libwebpdemux2-32bitUpgrade mozillafirefox-branding-upstreamUpgrade libwebp-toolsUpgrade libwebp6-32bitUpgrade libwebp5Upgrade libwebpmux3Upgrade mozillathunderbird-translations-otherUpgrade seamonkey-dom-inspectorUpgrade libwebpdecoder1Upgrade libwebp5-32bitUpgrade mozillafirefox-translations-commonUpgrade libwebpextras0Upgrade libwebpmux3-32bitUpgrade seamonkeyUpgrade libwebpdecoder3-32bitUpgrade libwebpdemux2Upgrade libwebpdecoder2-32bitUpgrade mozillathunderbirdUpgrade libwebp6Upgrade libwebpmux2-32bitUpgrade libwebp-develUpgrade libwebp7Upgrade libwebpextras0-32bitUpgrade libwebp-devel-32bitUpgrade libwebpmux1Upgrade libwebpdecoder3Upgrade libwebpdecoder2Upgrade mozillafirefox-develUpgrade mozillathunderbird-translations-commonUpgrade libwebpmux2Upgrade chromiumUpgrade libwebp7-32bitUpgrade chromedriverUpgrade mozillafirefox-translations-otherUpgrade mozillafirefoxUpgrade libwebpdemux1Upgrade seamonkey-irc | Sep 14, 2023 | Sep 13, 2023 |
| Ubuntu | — | Upgrade firefoxUpgrade libwebpdemux2Upgrade libwebpmux3Upgrade thunderbirdUpgrade libwebpdemux2 (Ubuntu Pro)Upgrade libwebp7Upgrade libwebp6Upgrade libwebp6 (Ubuntu Pro)Upgrade libwebpmux3 (Ubuntu Pro) | Sep 18, 2023 | Sep 12, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 12, 2023 |
| Zimbra Collaboration | — | Upgrade Zimbra Collaboration to the latest version | Jan 20, 2025 | Sep 12, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub