Read the docs

Webmproject

Records25All Threatist records
Exploited (KEV)2In CISA KEV
CVSS critical12CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9

Exploited now

Webmproject records in CISA KEV
TI-2023-04799 Google Chromium libvpx Heap Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2023-10-02TI-2023-04477 Google Chromium WebP Heap-Based Buffer Overflow Vulnerability Priority CRITICAL 97KEV 2023-09-13

Components

Products in the NVD configurations · select one to filter the records
Libwebp 15 records CRITICAL Libvpx 6 records CRITICAL Libwebm 4 records MEDIUM

Records

6 records in Libvpx · all components

TI-2023-04799 CVE-2023-5217 · GHSA-qqvq-6xgj-jw8g

Out-of-bounds write in Google Chrome

Priority CRITICAL 97KEV

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.49013 Published 2023-09-28 Partial fix · 117.0.5938.132, 1.13.1 +5 CWE-787
TI-2010-03956 CVE-2010-4203 · GHSA-v9gv-2chp-hf2r

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before…

Priority MEDIUM 49

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04569 Published 2010-11-05 Fixed CWE-190
TI-2024-04823 CVE-2024-5197 · GHSA-4h58-f788-v8pw

Integer overflow in libvpx

Priority LOW 28

There exists interger overflows in libvpx in versions prior to 1.14.1.

CVSS 4.0MEDIUM 5.9 Network Low privileges User interaction EPSS 0.00814 Published 2024-06-03 Partial fix · 1.14.1 CWE-190
TI-2023-05828 CVE-2023-6349

Heap overflow in libvpx

Priority LOW 26

A heap overflow vulnerability exists in libvpx - Encoding a frame that has larger dimensions than the originally configured size with VP9 may result in a heap overflow in libvpx.

CVSS 4.0MEDIUM 5.7 Local Low privileges User interaction EPSS 0.00365 Published 2024-05-27 Partial fix · 1.13.1 CWE-122
Open these records in search →