CVE-2023-5217

HIGH8.8⚠ KEVEPSS 5.0%

Electron affected by libvpx's heap buffer overflow in vp8 encoding

發布日:2023/9/28修改日:2026/4/28加入 CISA KEV 日:2023/10/2

描述

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

受影響套件(8)

CVSS 分數

來源版本嚴重程度向量
osvCVSS 3.1HIGH8.8CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

參考連結(64)