Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvpxUpgrade libvpx-develUpgrade firefoxUpgrade thunderbirdUpgrade firefox-x11 | Oct 10, 2023 | Sep 28, 2023 |
| Alpine Linux | — | Upgrade firefox-esrUpgrade libvpxUpgrade qt5-qtwebengine | Aug 22, 2024 | Sep 28, 2023 |
| Centos_linux | — | Upgrade thunderbirdUpgrade firefoxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfo | Oct 5, 2023 | Sep 28, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade libvpxUpgrade firefox-esrUpgrade chromium | Oct 2, 2023 | Sep 28, 2023 |
| Freebsd | — | Upgrade chromiumUpgrade electron22Upgrade libvpxUpgrade qt6-webengineUpgrade electron25Upgrade ungoogled-chromiumUpgrade electron24 | Sep 29, 2023 | Sep 29, 2023 |
| Gentoo Linux | — | Upgrade www-client/microsoft-edge.Upgrade www-client/chromium.Upgrade www-client/google-chrome.Upgrade media-libs/libvpx. | Oct 5, 2023 | Sep 28, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 28, 2023 | Sep 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvpx | Mar 13, 2024 | Sep 28, 2023 |
| Mfsa2023 44 | — | Upgrade to Mozilla Firefox ESR version 115.3.1Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 118.0.1 | Sep 29, 2023 | Sep 28, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Oct 2, 2023 | Sep 29, 2023 |
| Mozilla Thunderbird | — | Upgrade to the latest version of Mozilla ThunderbirdUpgrade to Mozilla Thunderbird version 115.3.1 | Oct 2, 2023 | Sep 28, 2023 |
| Oracle_linux | — | Upgrade libvpx-develUpgrade thunderbirdUpgrade firefoxUpgrade firefox-x11Upgrade libvpx | Oct 5, 2023 | Sep 27, 2023 |
| Redhat_linux | — | Upgrade libvpx-develUpgrade firefox-x11Upgrade libvpx-utils-debuginfoUpgrade libvpx-debugsourceUpgrade firefox-debugsourceUpgrade libvpxUpgrade thunderbird-debuginfoUpgrade firefox-debuginfoUpgrade thunderbird-debugsourceNo solution existsUpgrade libvpx-debuginfoUpgrade firefoxUpgrade thunderbird | Oct 5, 2023 | Sep 28, 2023 |
| Rocky_linux | — | Upgrade libvpxUpgrade libvpx-debugsourceUpgrade libvpx-debuginfoUpgrade libvpx-devel | Aug 15, 2024 | Sep 28, 2023 |
| Suse | — | Upgrade libvpx7Upgrade libvpx1Upgrade MozillaFirefox-translations-commonUpgrade mozillafirefox-branding-upstreamUpgrade vlc-langUpgrade libvpx4-32bitUpgrade MozillaFirefoxUpgrade libvlccore9Upgrade libvpx4Upgrade vlc-vdpauUpgrade libvpx-develUpgrade vlc-qtUpgrade vlc-noxUpgrade chromedriverUpgrade vlc-codec-gstreamerUpgrade MozillaThunderbird-translations-otherUpgrade libvpx7-32bitUpgrade vlcUpgrade MozillaThunderbirdUpgrade chromiumUpgrade vlc-opencvUpgrade MozillaFirefox-develUpgrade vpx-toolsUpgrade vlc-develUpgrade operaUpgrade libvpx1-32bitUpgrade libvlc5Upgrade MozillaFirefox-translations-otherUpgrade vlc-jackUpgrade MozillaThunderbird-translations-common | Oct 2, 2023 | Sep 28, 2023 |
| Ubuntu | — | Upgrade libvpx7Upgrade libvpx1 (Ubuntu Pro)Upgrade libvpx6Upgrade libvpx5 (Ubuntu Pro)Upgrade thunderbirdUpgrade firefoxUpgrade libvpx3 (Ubuntu Pro) | Oct 3, 2023 | Sep 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub