Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS Details
- CVSS 3.1 Base Score: 8.8
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade libvpx-develUpgrade libvpxUpgrade firefox-x11Upgrade firefoxUpgrade thunderbird | Oct 10, 2023 | Sep 28, 2023 |
| Alpine Linux | — | Upgrade qt5-qtwebengineUpgrade libvpxUpgrade firefox-esr | Aug 22, 2024 | Sep 28, 2023 |
| Centos_linux | — | Upgrade firefox-debuginfoUpgrade thunderbird-debuginfoUpgrade firefoxUpgrade thunderbird | Oct 5, 2023 | Sep 28, 2023 |
| Debian | — | Upgrade thunderbirdUpgrade chromiumUpgrade libvpxUpgrade firefox-esr | Oct 2, 2023 | Sep 28, 2023 |
| Freebsd | — | Upgrade ungoogled-chromiumUpgrade electron24Upgrade electron25Upgrade libvpxUpgrade qt6-webengineUpgrade electron22Upgrade chromium | Sep 29, 2023 | Sep 29, 2023 |
| Gentoo Linux | — | Upgrade www-client/google-chrome.Upgrade media-libs/libvpx.Upgrade www-client/microsoft-edge.Upgrade www-client/chromium. | Oct 5, 2023 | Sep 28, 2023 |
| Google Chrome | — | Upgrade to the latest version of Google Chrome | Sep 28, 2023 | Sep 27, 2023 |
| Huawei Euleros 2_0_sp8 | — | Upgrade libvpx | Mar 13, 2024 | Sep 28, 2023 |
| Mfsa2023 44 | — | Upgrade to the latest version of Mozilla FirefoxUpgrade to Mozilla Firefox version 118.0.1Upgrade to Mozilla Firefox ESR version 115.3.1 | Sep 29, 2023 | Sep 28, 2023 |
| Microsoft Edge | — | Update Microsoft Edge to the latest version | Oct 2, 2023 | Sep 29, 2023 |
| Mozilla Thunderbird | — | Upgrade to Mozilla Thunderbird version 115.3.1Upgrade to the latest version of Mozilla Thunderbird | Oct 2, 2023 | Sep 28, 2023 |
| Oracle_linux | — | Upgrade libvpxUpgrade libvpx-develUpgrade thunderbirdUpgrade firefox-x11Upgrade firefox | Oct 5, 2023 | Sep 27, 2023 |
| Redhat_linux | — | Upgrade firefoxUpgrade thunderbirdUpgrade libvpx-debuginfoUpgrade libvpx-develUpgrade thunderbird-debuginfoUpgrade libvpx-utils-debuginfoUpgrade libvpxUpgrade firefox-debugsourceUpgrade firefox-debuginfoUpgrade thunderbird-debugsourceNo solution existsUpgrade libvpx-debugsourceUpgrade firefox-x11 | Oct 5, 2023 | Sep 28, 2023 |
| Rocky_linux | — | Upgrade libvpx-debuginfoUpgrade libvpx-develUpgrade libvpx-debugsourceUpgrade libvpx | Aug 15, 2024 | Sep 28, 2023 |
| Suse | — | Upgrade libvpx1Upgrade libvlccore9Upgrade MozillaFirefox-translations-commonUpgrade libvpx4Upgrade libvpx-develUpgrade vlc-vdpauUpgrade vlc-langUpgrade vlc-noxUpgrade libvpx7Upgrade mozillafirefox-branding-upstreamUpgrade MozillaFirefoxUpgrade libvpx4-32bitUpgrade vlc-qtUpgrade chromiumUpgrade vlc-codec-gstreamerUpgrade MozillaThunderbirdUpgrade libvpx1-32bitUpgrade libvlc5Upgrade vlcUpgrade MozillaThunderbird-translations-otherUpgrade chromedriverUpgrade MozillaFirefox-translations-otherUpgrade vlc-jackUpgrade vlc-develUpgrade vpx-toolsUpgrade operaUpgrade MozillaFirefox-develUpgrade vlc-opencvUpgrade libvpx7-32bitUpgrade MozillaThunderbird-translations-common | Oct 2, 2023 | Sep 28, 2023 |
| Ubuntu | — | Upgrade firefoxUpgrade thunderbirdUpgrade libvpx3 (Ubuntu Pro)Upgrade libvpx7Upgrade libvpx5 (Ubuntu Pro)Upgrade libvpx1 (Ubuntu Pro)Upgrade libvpx6 | Oct 3, 2023 | Sep 28, 2023 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Sep 28, 2023 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub