{"affected":[{"affectedData":[{"product":"Chrome","vendor":"Google","versions":[{"lessThan":"116.0.5845.187","status":"affected","version":"116.0.5845.187","versionType":"custom"}]},{"product":"libwebp","vendor":"Google","versions":[{"lessThan":"1.3.2","status":"affected","version":"1.3.2","versionType":"custom"}]}],"source":"chrome-cve-admin@google.com"}],"cisaActionDue":"2023-10-04","cisaExploitAdd":"2023-09-13","cisaRequiredAction":"Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.","cisaVulnerabilityName":"Google Chromium WebP Heap-Based Buffer Overflow Vulnerability","configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*","matchCriteriaId":"856C1821-5D22-4A4E-859D-8F5305255AB7","versionEndExcluding":"116.0.5845.187","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*","matchCriteriaId":"E30D0E6F-4AE8-4284-8716-991DFA48CC5D","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*","matchCriteriaId":"CC559B26-5DFC-4B7A-A27C-B77DE755DFF9","vulnerable":true},{"criteria":"cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*","matchCriteriaId":"B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*","matchCriteriaId":"07B237A9-69A3-4A9C-9DA0-4E06BD37AE73","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*","matchCriteriaId":"FA6FEEC2-9F11-4643-8827-749718254FED","vulnerable":true},{"criteria":"cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*","matchCriteriaId":"46D69DCC-AE4D-4EA5-861C-D60951444C6C","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*","matchCriteriaId":"54B8855E-19B9-4D20-9B93-A5219F077335","versionEndExcluding":"102.15.1","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*","matchCriteriaId":"FBA8858E-AB6C-4708-820D-3F9D8D5A077F","versionEndExcluding":"117.0.1","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*","matchCriteriaId":"6C494574-4187-4BC7-816B-6C1C288D711E","versionEndExcluding":"115.2.1","versionStartIncluding":"115.1.0","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"A073724D-52BD-4426-B58D-7A8BD24B8F8E","versionEndExcluding":"102.15.1","vulnerable":true},{"criteria":"cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:*","matchCriteriaId":"952BEC0C-2DB0-476A-AF62-1269F8635B4A","versionEndExcluding":"115.2.2","versionStartIncluding":"115.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:microsoft:edge_chromium:*:*:*:*:*:*:*:*","matchCriteriaId":"0C8F8BD1-1D13-4605-BF19-E4292E2D6A00","versionEndExcluding":"116.0.1938.81","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:*:macos:*:*","matchCriteriaId":"11C16818-7453-46CB-89C2-2A4D4452A198","versionEndExcluding":"1.6.00.26463","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:teams:*:*:*:*:desktop:*:*:*","matchCriteriaId":"46625A28-312D-4406-87AE-8A7C93222A45","versionEndExcluding":"1.6.00.26474","vulnerable":true},{"criteria":"cpe:2.3:a:microsoft:webp_image_extension:*:*:*:*:*:*:*:*","matchCriteriaId":"201D3850-75A4-4CB4-A312-B01BF51C7C8A","versionEndExcluding":"1.0.62681.0","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:webmproject:libwebp:*:*:*:*:*:*:*:*","matchCriteriaId":"2804DDE4-B0A4-4B7F-A318-F491B6316B34","versionEndExcluding":"1.3.2","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:netapp:active_iq_unified_manager:-:*:*:*:*:vmware_vsphere:*:*","matchCriteriaId":"3A756737-1CC4-42C2-A4DF-E1C893B4E2D5","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:bentley:seequent_leapfrog:*:*:*:*:*:*:*:*","matchCriteriaId":"E50A797C-2C6C-46A5-A9D0-8CD877EBA3CD","versionEndExcluding":"2023.2","vulnerable":true}],"negate":false,"operator":"OR"}]},{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:a:bandisoft:honeyview:*:*:*:*:*:*:*:*","matchCriteriaId":"A9D1BE06-A20B-43F3-B78D-21F2FF20026C","versionEndExcluding":"5.51","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)"},{"lang":"es","value":"El desbordamiento del búfer de memoria en libwebp en Google Chrome anterior a 116.0.5845.187 y libwebp 1.3.2 permitía a un atacante remoto realizar una escritura en memoria fuera de los límites a través de una página HTML manipulada. (Severidad de seguridad de Chromium: crítica)"}],"id":"CVE-2023-4863","lastModified":"2026-06-17T06:38:46.547","metrics":{"cvssMetricV31":[{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"},{"cvssData":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"HIGH","baseScore":8.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.1"},"exploitabilityScore":2.8,"impactScore":5.9,"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"id":"CVE-2023-4863","options":[{"exploitation":"active"},{"automatable":"no"},{"technicalImpact":"total"}],"role":"CISA Coordinator","timestamp":"2023-11-28T05:00:18.341149Z","version":"2.0.3"}}]},"published":"2023-09-12T15:15:24.327","references":[{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/21/4"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/1"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/3"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/4"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/5"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/6"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/7"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/8"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/26/1"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/26/7"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/28/1"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/28/2"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4"},{"source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"],"url":"https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/"},{"source":"chrome-cve-admin@google.com","tags":["Exploit","Third Party Advisory"],"url":"https://blog.isosceles.com/the-webp-0day/"},{"source":"chrome-cve-admin@google.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.suse.com/show_bug.cgi?id=1215231"},{"source":"chrome-cve-admin@google.com","tags":["Vendor Advisory"],"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html"},{"source":"chrome-cve-admin@google.com","tags":["Issue Tracking","Vendor Advisory"],"url":"https://crbug.com/1479274"},{"source":"chrome-cve-admin@google.com","tags":["Release Notes"],"url":"https://en.bandisoft.com/honeyview/history/"},{"source":"chrome-cve-admin@google.com","tags":["Patch"],"url":"https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a"},{"source":"chrome-cve-admin@google.com","tags":["Release Notes"],"url":"https://github.com/webmproject/libwebp/releases/tag/v1.3.2"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/"},{"source":"chrome-cve-admin@google.com","tags":["Patch","Third Party Advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863"},{"source":"chrome-cve-admin@google.com","tags":["Exploit","Third Party Advisory"],"url":"https://news.ycombinator.com/item?id=37478403"},{"source":"chrome-cve-admin@google.com","tags":["Issue Tracking","Third Party Advisory"],"url":"https://security-tracker.debian.org/tracker/CVE-2023-4863"},{"source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202309-05"},{"source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202401-10"},{"source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230929-0011/"},{"source":"chrome-cve-admin@google.com","tags":["Exploit"],"url":"https://sethmlarson.dev/security-developer-in-residence-weekly-report-16"},{"source":"chrome-cve-admin@google.com","tags":["Exploit","Third Party Advisory"],"url":"https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/"},{"source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"],"url":"https://www.bentley.com/advisories/be-2023-0001/"},{"source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"],"url":"https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://www.debian.org/security/2023/dsa-5496"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List"],"url":"https://www.debian.org/security/2023/dsa-5497"},{"source":"chrome-cve-admin@google.com","tags":["Mailing List","Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5498"},{"source":"chrome-cve-admin@google.com","tags":["Third Party Advisory"],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/21/4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/3"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/5"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/6"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/7"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/22/8"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/26/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/26/7"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/28/1"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/28/2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"http://www.openwall.com/lists/oss-security/2023/09/28/4"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://blog.isosceles.com/the-webp-0day/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://bugzilla.suse.com/show_bug.cgi?id=1215231"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Vendor Advisory"],"url":"https://crbug.com/1479274"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"],"url":"https://en.bandisoft.com/honeyview/history/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch"],"url":"https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211debcec8d2ab87e17a"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Release Notes"],"url":"https://github.com/webmproject/libwebp/releases/tag/v1.3.2"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Third Party Advisory"],"url":"https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://news.ycombinator.com/item?id=37478403"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Issue Tracking","Third Party Advisory"],"url":"https://security-tracker.debian.org/tracker/CVE-2023-4863"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202309-05"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.gentoo.org/glsa/202401-10"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://security.netapp.com/advisory/ntap-20230929-0011/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"url":"https://sethmlarson.dev/security-developer-in-residence-weekly-report-16"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-4863/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.bentley.com/advisories/be-2023-0001/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.bleepingcomputer.com/news/google/google-fixes-another-chrome-zero-day-bug-exploited-in-attacks/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://www.debian.org/security/2023/dsa-5496"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List"],"url":"https://www.debian.org/security/2023/dsa-5497"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Mailing List","Third Party Advisory"],"url":"https://www.debian.org/security/2023/dsa-5498"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory"],"url":"https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Third Party Advisory"],"url":"https://www.vicarius.io/vsociety/posts/zero-day-webp-vulnerability-cve-2023-4863"},{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","tags":["US Government Resource"],"url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-4863"}],"sourceIdentifier":"chrome-cve-admin@google.com","vulnStatus":"Analyzed","weaknesses":[{"description":[{"lang":"en","value":"CWE-787"}],"source":"nvd@nist.gov","type":"Primary"},{"description":[{"lang":"en","value":"CWE-787"}],"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","type":"Secondary"}]}