A AegiFlow
UNKNOWNKNOWN EXPLOITED

CVE-2023-5217

Google Chromium libvpx Heap Buffer Overflow Vulnerability

Published
2023-10-02
Modified
2026-07-31
Sources
cisa-kev

Summary

Google Chromium libvpx contains a heap buffer overflow vulnerability in vp8 encoding that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using libvpx, including but not limited to Google Chrome.

References

Includes data from the CISA Known Exploited Vulnerabilities catalog.

CVE® is a registered trademark of The MITRE Corporation. CVE content reproduced under the CVE Terms of Use; copyright designation © MITRE.