Electron affected by libvpx's heap buffer overflow in vp8 encoding
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2023-5217US | high8.8OT kritisch | KEV | ||
Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a cra… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- http://seclists.org/fulldisclosure/2023/Oct/12WEB
- http://seclists.org/fulldisclosure/2023/Oct/16WEB
- http://www.openwall.com/lists/oss-security/2023/09/28/5WEB
- http://www.openwall.com/lists/oss-security/2023/09/28/6WEB
- http://www.openwall.com/lists/oss-security/2023/09/29/1WEB
- http://www.openwall.com/lists/oss-security/2023/09/29/11WEB
- http://www.openwall.com/lists/oss-security/2023/09/29/12WEB
- http://www.openwall.com/lists/oss-security/2023/09/29/14WEB
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan