Google libvpx vulnerabilities

Latest Google libvpx CVEs

Newest publication first

1. CVE-2023-5217 Electron affected by libvpx's heap buffer overflow in vp8 encoding

   Published 2023-09-28

   High·CVSS 8.8 EPSS 49.0% CISA KEV added 2023-10-02 Exploited in the wild

   Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.