{"id":"CVE-2023-4863","published":"2023-09-12T15:15:24Z","modified":"2026-06-17T06:38:46Z","title":"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","vendor":"Google","product":"Chromium WebP","tier":"core","eol":null,"description":{"text":"Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)","provenance":"source","from":"NVD"},"summary":{"text":"The Chromium WebP component (libwebp, as shipped in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2) contains a heap-based buffer overflow that leads to an out-of-bounds memory write. An remote attacker can trigger it by getting a user to load a crafted HTML page, requiring no authentication, only user interaction.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-23T07:10:12Z"},"cvss":{"score":8.8,"severity":"HIGH","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","provenance":"source","from":"NVD"},"epss":{"score":0.99979,"percentile":0.9998,"date":"2026-10-29","provenance":"source"},"kev":{"dateAdded":"2023-09-13","dueDate":"2023-10-04","ransomware":false,"requiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","notes":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html?m=1; https://nvd.nist.gov/vuln/detail/CVE-2023-4863","provenance":"source"},"vulncheckKev":{"dateAdded":"2023-09-06","exploitedFirstSeen":"2023-09-06","ransomware":false,"evidence":[{"url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","date":"2023-09-06"},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html","date":"2023-09-11"},{"url":"https://api.msrc.microsoft.com/cvrf/v3.0/cvrf/2023-Sep","date":"2023-09-12"},{"url":"https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json","date":"2023-09-13"},{"url":"https://ti.qianxin.com/uploads/2024/02/02/dcc93e586f9028c68e7ab34c3326ff31.pdf","date":"2024-02-02"},{"url":"https://go.recordedfuture.com/hubfs/reports/ta-2024-0321.pdf","date":"2024-03-21"},{"url":"https://storage.googleapis.com/gweb-uniblog-publish-prod/documents/Year_in_Review_of_ZeroDays.pdf","date":"2024-03-27"},{"url":"https://www.gendigital.com/blog/insights/leadership-perspectives/zero-day-netflix","date":"2025-03-26"},{"url":"https://www.ox.security/wp-content/uploads/2025/05/The-KEV-Illusion-Separating-True-Threats-from-Pretend-Critical-Risks-v4.pdf","date":"2025-05-30"}],"evidenceTotal":9,"provenance":"source"},"exploited":true,"otx":{"pulseCount":50,"pulses":[{"name":"Actively_Exploited_Kev | Oct 30, 2026","url":"https://otx.alienvault.com/pulse/6ae35d889ea92b4ce19c2680","created":"2026-10-29"},{"name":"Actively_Exploited_Kev | Oct 29, 2026","url":"https://otx.alienvault.com/pulse/6ae20c1db17e7057ae7d9ad1","created":"2026-10-28"},{"name":"Actively_Exploited_Kev | Oct 28, 2026","url":"https://otx.alienvault.com/pulse/6ae0ba7e0e2a97ff7b218819","created":"2026-10-27"},{"name":"Actively_Exploited_Kev | Oct 27, 2026","url":"https://otx.alienvault.com/pulse/6adf68b85c3e852f3c111d18","created":"2026-10-26"},{"name":"Actively_Exploited_Kev | Oct 24, 2026","url":"https://otx.alienvault.com/pulse/6adb740e397c3ad4799aa4cd","created":"2026-10-23"},{"name":"Actively_Exploited_Kev | Oct 23, 2026","url":"https://otx.alienvault.com/pulse/6ada236fcfba2dfa730ea482","created":"2026-10-22"},{"name":"Actively_Exploited_Kev | Oct 22, 2026","url":"https://otx.alienvault.com/pulse/6ad8d33a077cbb5cab524d80","created":"2026-10-21"},{"name":"Actively_Exploited_Kev | Oct 21, 2026","url":"https://otx.alienvault.com/pulse/6ad78130c4d1ac2be83a8b6d","created":"2026-10-20"},{"name":"Actively_Exploited_Kev | Oct 20, 2026","url":"https://otx.alienvault.com/pulse/6ad62f63c24a405a3423cc13","created":"2026-10-19"},{"name":"Actively_Exploited_Kev | Oct 19, 2026","url":"https://otx.alienvault.com/pulse/6ad4dda174e5797d0bd238b7","created":"2026-10-18"}],"provenance":"machine"},"cwes":[{"id":"CWE-787","name":"Out-of-bounds Write"}],"references":[{"url":"http://www.openwall.com/lists/oss-security/2023/09/21/4","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/1","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/3","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/4","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/5","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/6","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/7","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/8","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/1","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/7","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/1","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/2","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4","tags":["Mailing List"]},{"url":"https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/","tags":["Third Party Advisory"]},{"url":"https://blog.isosceles.com/the-webp-0day/","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1215231","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html","tags":["Vendor Advisory"]},{"url":"https://crbug.com/1479274","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://en.bandisoft.com/honeyview/history/","tags":["Release Notes"]},{"url":"https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a","tags":["Patch"]},{"url":"https://github.com/webmproject/libwebp/releases/tag/v1.3.2","tags":["Release Notes"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/","tags":["Mailing List"]},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863","tags":["Patch","Third Party Advisory"]},{"url":"https://news.ycombinator.com/item?id=37478403","tags":["Exploit","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-4863","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202309-05","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202401-10","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230929-0011/","tags":["Third Party Advisory"]},{"url":"https://sethmlarson.dev/security-developer-in-residence-weekly-report-16","tags":["Exploit"]},{"url":"https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.bentley.com/advisories/be-2023-0001/","tags":["Third Party Advisory"]},{"url":"https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5496","tags":["Mailing List"]},{"url":"https://www.debian.org/security/2023/dsa-5497","tags":["Mailing List"]},{"url":"https://www.debian.org/security/2023/dsa-5498","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/","tags":["Third Party Advisory"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/21/4","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/1","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/3","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/4","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/5","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/6","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/7","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/22/8","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/1","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/26/7","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/1","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/2","tags":["Mailing List"]},{"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4","tags":["Mailing List"]},{"url":"https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/","tags":["Third Party Advisory"]},{"url":"https://blog.isosceles.com/the-webp-0day/","tags":["Exploit","Third Party Advisory"]},{"url":"https://bugzilla.suse.com/show_bug.cgi?id=1215231","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html","tags":["Vendor Advisory"]},{"url":"https://crbug.com/1479274","tags":["Issue Tracking","Vendor Advisory"]},{"url":"https://en.bandisoft.com/honeyview/history/","tags":["Release Notes"]},{"url":"https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a","tags":["Patch"]},{"url":"https://github.com/webmproject/libwebp/releases/tag/v1.3.2","tags":["Release Notes"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html","tags":["Mailing List","Third Party Advisory"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/","tags":["Mailing List"]},{"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/","tags":["Mailing List"]},{"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863","tags":["Patch","Third Party Advisory"]},{"url":"https://news.ycombinator.com/item?id=37478403","tags":["Exploit","Third Party Advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2023-4863","tags":["Issue Tracking","Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202309-05","tags":["Third Party Advisory"]},{"url":"https://security.gentoo.org/glsa/202401-10","tags":["Third Party Advisory"]},{"url":"https://security.netapp.com/advisory/ntap-20230929-0011/","tags":["Third Party Advisory"]},{"url":"https://sethmlarson.dev/security-developer-in-residence-weekly-report-16","tags":["Exploit"]},{"url":"https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.bentley.com/advisories/be-2023-0001/","tags":["Third Party Advisory"]},{"url":"https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/","tags":["Third Party Advisory"]},{"url":"https://www.debian.org/security/2023/dsa-5496","tags":["Mailing List"]},{"url":"https://www.debian.org/security/2023/dsa-5497","tags":["Mailing List"]},{"url":"https://www.debian.org/security/2023/dsa-5498","tags":["Mailing List","Third Party Advisory"]},{"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/","tags":["Third Party Advisory"]},{"url":"https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863","tags":["Exploit","Third Party Advisory"]},{"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4863","tags":["US Government Resource"]}],"techniques":[{"id":"T1189","name":"Drive-by Compromise","tactics":["initial-access"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Drive-by via malicious web page","mappingType":"exploitation_technique","evidence":[{"from":"description","quote":"via a crafted HTML page","start":158,"end":181}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"},{"id":"T1059","name":"Command and Scripting Interpreter","tactics":["execution"],"provenance":"ai","basis":"ai-mapping","bases":["ai-mapping"],"basisDetail":"claude-haiku-5-5: Memory corruption yields code execution","mappingType":"primary_impact","evidence":[{"from":"description","quote":"perform an out of bounds memory write","start":120,"end":157}],"model":"claude-haiku-5-5","confidence":"medium","confidenceNote":"AI-mapped from the description (quote-validated, not expert-reviewed)"}],"reports":[],"affected":[{"ecosystem":"crates.io","package":"libwebp-sys2","vulnerableRanges":["<0.1.8",">=0.0.0-0, <0.1.8"],"patched":["0.1.8"],"from":["GHSA-j7hp-h8jx-5ppr","RUSTSEC-2023-0060"],"provenance":"source"},{"ecosystem":"crates.io","package":"libwebp-sys","vulnerableRanges":["<0.9.3",">=0.0.0-0, <0.9.3"],"patched":["0.9.3"],"from":["GHSA-j7hp-h8jx-5ppr","RUSTSEC-2023-0061"],"provenance":"source"},{"ecosystem":"npm","package":"electron","vulnerableRanges":[">=22.0.0, <22.3.24",">=24.0.0, <24.8.3",">=25.0.0, <25.8.1",">=26.0.0, <26.2.1",">=27.0.0-beta.1, <27.0.0-beta.2"],"patched":["22.3.24","24.8.3","25.8.1","26.2.1","27.0.0-beta.2"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"NuGet","package":"SkiaSharp","vulnerableRanges":[">=2.0.0, <2.88.6"],"patched":["2.88.6"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"Go","package":"github.com/chai2010/webp","vulnerableRanges":[">=1.1.2, <1.4.0","<0.0.0-20250406010349-76805d5a8860",">=0.0.0, <1.1.2-0.20250406010349-76805d5a8860"],"patched":["1.4.0","0.0.0-20250406010349-76805d5a8860","1.1.2-0.20250406010349-76805d5a8860"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"PyPI","package":"Pillow","vulnerableRanges":["<10.0.1"],"patched":["10.0.1"],"from":["GHSA-j7hp-h8jx-5ppr","PYSEC-2026-1794"],"provenance":"source"},{"ecosystem":"crates.io","package":"webp","vulnerableRanges":["<0.2.6"],"patched":["0.2.6"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"NuGet","package":"magick.net-q16-anycpu","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"NuGet","package":"magick.net-q16-hdri-anycpu","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"NuGet","package":"magick.net-q16-x64","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"NuGet","package":"magick.net-q8-anycpu","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"NuGet","package":"magick.net-q8-openmp-x64","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"},{"ecosystem":"NuGet","package":"magick.net-q8-x64","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"from":["GHSA-j7hp-h8jx-5ppr"],"provenance":"source"}],"advisories":[{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"crates.io","package":"libwebp-sys2","vulnerableRanges":["<0.1.8"],"patched":["0.1.8"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"crates.io","package":"libwebp-sys","vulnerableRanges":["<0.9.3"],"patched":["0.9.3"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"npm","package":"electron","vulnerableRanges":[">=22.0.0, <22.3.24"],"patched":["22.3.24"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"npm","package":"electron","vulnerableRanges":[">=24.0.0, <24.8.3"],"patched":["24.8.3"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"npm","package":"electron","vulnerableRanges":[">=25.0.0, <25.8.1"],"patched":["25.8.1"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"npm","package":"electron","vulnerableRanges":[">=26.0.0, <26.2.1"],"patched":["26.2.1"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"npm","package":"electron","vulnerableRanges":[">=27.0.0-beta.1, <27.0.0-beta.2"],"patched":["27.0.0-beta.2"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"NuGet","package":"SkiaSharp","vulnerableRanges":[">=2.0.0, <2.88.6"],"patched":["2.88.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"Go","package":"github.com/chai2010/webp","vulnerableRanges":[">=1.1.2, <1.4.0"],"patched":["1.4.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"PyPI","package":"Pillow","vulnerableRanges":["<10.0.1"],"patched":["10.0.1"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"crates.io","package":"webp","vulnerableRanges":["<0.2.6"],"patched":["0.2.6"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"NuGet","package":"magick.net-q16-anycpu","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"NuGet","package":"magick.net-q16-hdri-anycpu","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"NuGet","package":"magick.net-q16-x64","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"NuGet","package":"magick.net-q8-anycpu","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"NuGet","package":"magick.net-q8-openmp-x64","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"NuGet","package":"magick.net-q8-x64","vulnerableRanges":["<13.3.0"],"patched":["13.3.0"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"Go","package":"github.com/chai2010/webp","vulnerableRanges":["<0.0.0-20250406010349-76805d5a8860"],"patched":["0.0.0-20250406010349-76805d5a8860"],"provenance":"source","from":"GHSA"},{"id":"GHSA-j7hp-h8jx-5ppr","url":"https://github.com/advisories/GHSA-j7hp-h8jx-5ppr","severity":"HIGH","ecosystem":"Go","package":"github.com/chai2010/webp","vulnerableRanges":[">=0.0.0, <1.1.2-0.20250406010349-76805d5a8860"],"patched":["1.1.2-0.20250406010349-76805d5a8860"],"provenance":"source","from":"GHSA"}],"euvd":{"id":"EUVD-2023-2533","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2533","exploited":true,"exploitedSince":"2023-09-13","provenance":"source"},"exploits":[],"exploitSources":{"pocGithub":{"count":12,"skipped":2,"earliest":"2023-09-21","earliestUrl":"https://github.com/mistymntncop/CVE-2023-4863","repos":[{"name":"mistymntncop/CVE-2023-4863","url":"https://github.com/mistymntncop/CVE-2023-4863","stars":320,"created":"2023-09-21"},{"name":"LiveOverflow/webp-CVE-2023-4863","url":"https://github.com/LiveOverflow/webp-CVE-2023-4863","stars":56,"created":"2023-12-18"},{"name":"caoweiquan322/NotEnough","url":"https://github.com/caoweiquan322/NotEnough","stars":25,"created":"2023-12-19"},{"name":"murphysecurity/libwebp-checker","url":"https://github.com/murphysecurity/libwebp-checker","stars":21,"created":"2023-10-05"},{"name":"bbaranoff/CVE-2023-4863","url":"https://github.com/bbaranoff/CVE-2023-4863","stars":6,"created":"2023-09-25"}]},"first":{"date":"2023-09-21","source":"PoC-in-GitHub","url":"https://github.com/mistymntncop/CVE-2023-4863"},"provenance":"source"},"exploitRefs":["https://blog.isosceles.com/the-webp-0day/","https://news.ycombinator.com/item?id=37478403","https://sethmlarson.dev/security-developer-in-residence-weekly-report-16","https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/","https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863"],"flow":[{"stage":"exploitation","techniques":["T1189"],"provenance":"ai"},{"stage":"primary","techniques":["T1059"],"provenance":"ai"}],"timeline":[{"date":"2023-09-06","kind":"exploited-reported","label":"Exploitation first reported (VulnCheck KEV evidence)","url":"https://docs.google.com/spreadsheets/d/1lkNJ0uQwbeC1ZTRrxdtuPLCIl7mlUreoKfSIgajnSyY/edit","provenance":"source"},{"date":"2023-09-12","kind":"published","label":"Published (NVD)","url":"https://nvd.nist.gov/vuln/detail/CVE-2023-4863","provenance":"source"},{"date":"2023-09-13","kind":"kev","label":"Added to CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","provenance":"source"},{"date":"2023-09-13","kind":"euvd-exploited","label":"ENISA EUVD: exploited","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-2533","provenance":"source"},{"date":"2023-09-21","kind":"exploit-public","label":"First public exploit: PoC-in-GitHub","url":"https://github.com/mistymntncop/CVE-2023-4863","provenance":"source"}],"speed":{"daysToPublicExploit":9,"firstExploitFrom":"PoC-in-GitHub","daysToKev":1},"priority":{"score":69.2,"factors":[{"name":"In a KEV catalog","points":35.0,"detail":"listed in CISA KEV and VulnCheck KEV"},{"name":"Recent KEV listing","points":0.0,"detail":"added 1150 days ago"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":20.0,"detail":"percentile 0.9998"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":5.0,"detail":"5 NVD references tagged Exploit; 12 PoC-in-GitHub repos"},{"name":"Mentioned in OTX pulses","points":3.0,"detail":"50 pulses"},{"name":"CVSS severity","points":6.16,"detail":"base score 8.8"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]},"lineage":{"familyId":"fam-class-google-chrome-cwe-787","packageHistory":[{"cve":"CVE-2023-29198","published":"2023-09-06","fixed":"25.0.0-alpha.2","kev":false},{"cve":"CVE-2023-39956","published":"2023-09-06","fixed":"26.0.0-beta.13","kev":false,"link":{"from":"CVE-2023-39956","to":"CVE-2023-4863","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"npm:electron","fromFixed":"22.3.19","toFixed":"22.3.24","daysApart":6},{"kind":"version-step","provenance":"source","package":"npm:electron","fromFixed":"24.7.1","toFixed":"24.8.3","daysApart":6}]}},{"cve":"CVE-2023-44402","published":"2023-12-01","fixed":"27.0.0-alpha.7","kev":false},{"cve":"CVE-2023-4863","published":"2023-09-12","fixed":"27.0.0-beta.2","kev":true},{"cve":"CVE-2023-5217","published":"2023-09-28","fixed":"27.0.0-beta.8","kev":true,"link":{"from":"CVE-2023-4863","to":"CVE-2023-5217","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"npm:electron","fromFixed":"22.3.24","toFixed":"22.3.25","daysApart":16},{"kind":"version-step","provenance":"source","package":"npm:electron","fromFixed":"24.8.3","toFixed":"24.8.5","daysApart":16}]}},{"cve":"CVE-2024-46993","published":"2025-07-01","fixed":"30.0.3","kev":false},{"cve":"CVE-2024-46992","published":"2025-07-01","fixed":"31.0.0-beta.1","kev":false}],"package":"npm:electron"}}