The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-x11Upgrade libvpx-develUpgrade libvpx | Oct 10, 2023 | Sep 28, 2023 |
| Alpine Linux | — | Upgrade qt5-qtwebengineUpgrade firefox-esrUpgrade libvpx | Aug 22, 2024 | Sep 28, 2023 |
| Centos_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade firefox-debuginfoUpgrade thunderbird-debuginfo | Oct 5, 2023 | Sep 28, 2023 |
| Debian | — | Upgrade firefox-esrUpgrade chromiumUpgrade libvpxUpgrade thunderbird | Oct 2, 2023 | Sep 28, 2023 |
| Freebsd | — | Upgrade qt6-webengineUpgrade libvpxUpgrade electron22Upgrade chromiumUpgrade ungoogled-chromiumUpgrade electron24Upgrade electron25 | Sep 29, 2023 | Sep 29, 2023 |
| Gentoo Linux | — | Upgrade www-client/chromium.Upgrade www-client/microsoft-edge.Upgrade www-client/google-chrome.Upgrade media-libs/libvpx. | Oct 5, 2023 | Sep 28, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 28, 2023 | Sep 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvpx | Mar 13, 2024 | Sep 28, 2023 |
| Mfsa2023 44 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox ESR version 115.3.1Upgrade to Mozilla Firefox version 118.0.1 | Sep 29, 2023 | Sep 28, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Oct 2, 2023 | Sep 29, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.3.1Upgrade to the latest version of Mozilla Thunderbird | Oct 2, 2023 | Sep 28, 2023 |
| Oracle_linux | — | Upgrade libvpxUpgrade firefox-x11Upgrade thunderbirdUpgrade libvpx-develUpgrade firefox | Oct 5, 2023 | Sep 27, 2023 |
| Redhat_linux | — | Upgrade thunderbird-debugsourceUpgrade libvpx-debugsourceUpgrade thunderbird-debuginfoUpgrade libvpxUpgrade firefox-debugsourceUpgrade libvpx-utils-debuginfoUpgrade firefox-debuginfoUpgrade libvpx-develNo solution existsUpgrade firefox-x11Upgrade thunderbirdUpgrade libvpx-debuginfoUpgrade firefox | Oct 5, 2023 | Sep 28, 2023 |
| Rocky_linux | — | Upgrade libvpx-debugsourceUpgrade libvpxUpgrade libvpx-develUpgrade libvpx-debuginfo | Aug 15, 2024 | Sep 28, 2023 |
| Suse | — | Upgrade libvlc5Upgrade MozillaThunderbird-translations-otherUpgrade libvpx7-32bitUpgrade libvpx1-32bitUpgrade chromiumUpgrade vlc-codec-gstreamerUpgrade vlc-jackUpgrade MozillaThunderbird-translations-commonUpgrade vlcUpgrade vlc-opencvUpgrade MozillaFirefox-develUpgrade MozillaFirefox-translations-otherUpgrade chromedriverUpgrade operaUpgrade MozillaThunderbirdUpgrade vpx-toolsUpgrade vlc-develUpgrade libvlccore9Upgrade libvpx7Upgrade mozillafirefox-branding-upstreamUpgrade vlc-vdpauUpgrade libvpx-develUpgrade vlc-qtUpgrade libvpx4-32bitUpgrade libvpx4Upgrade MozillaFirefox-translations-commonUpgrade vlc-langUpgrade MozillaFirefoxUpgrade vlc-noxUpgrade libvpx1 | Oct 2, 2023 | Sep 28, 2023 |
| Ubuntu | — | Upgrade thunderbirdUpgrade firefoxUpgrade libvpx3 (Ubuntu Pro)Upgrade libvpx7Upgrade libvpx1 (Ubuntu Pro)Upgrade libvpx6Upgrade libvpx5 (Ubuntu Pro) | Oct 3, 2023 | Sep 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 28, 2023 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub