CVE-2023-4863

Confirmed PUBLISHED

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds...

Google · Chrome, libwebp

Exploited in the wild PoC available

Recommended Action

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.

View KEV Feed Talk to Sales

Confidence

Confirmed

Exploitation Status

Exploited in the wild

Observed in Sensors

Attempts (30d)

—

Unique Attacker IPs

—

CISA KEV

In CISA KEV

CVSS / EPSS

8.8 High

At a Glance

Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

nessus_scanner cisa

CVE Published: Sep 12, 2023
Exploitation Reported: Sep 13, 2023
CVSS: 8.8 High
EPSS: —

Remote Low complexity Unauthenticated

Affected Versions

Vendor	Product	Version	Status
Google	Chrome	116.0.5845.187 to < 116.0.5845.187	Affected
Google	libwebp	1.3.2 to < 1.3.2	Affected

CVE References

chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_11... chromereleases.googleblog.com · CVE Record https://chromereleases.googleblog.com/2023/09/stable-channel-update-f...
crbug.com/1479274 crbug.com · CVE Record https://crbug.com/1479274
en.bandisoft.com/honeyview/history en.bandisoft.com · CVE Record https://en.bandisoft.com/honeyview/history/
stackdiary.com/critical-vulnerability-in-webp-codec-cve-202... stackdiary.com · CVE Record https://stackdiary.com/critical-vulnerability-in-webp-codec-cve-2023-...
mozilla.org/en-US/security/advisories/mfsa2023-40 mozilla.org · CVE Record https://www.mozilla.org/en-US/security/advisories/mfsa2023-40/

Show 40 more references

GitHub — webmproject/libwebp github.com · CVE Record https://github.com/webmproject/libwebp/commit/902bc9190331343b2017211...
msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863 msrc.microsoft.com · CVE Record https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-4863
security-tracker.debian.org/tracker/CVE-2023-4863 security-tracker.debian.org · CVE Record https://security-tracker.debian.org/tracker/CVE-2023-4863
bugzilla.suse.com/show_bug.cgi bugzilla.suse.com · CVE Record https://bugzilla.suse.com/show_bug.cgi?id=1215231
news.ycombinator.com/item news.ycombinator.com · CVE Record https://news.ycombinator.com/item?id=37478403
bleepingcomputer.com/news/google/google-fixes-another-chrome-zero... bleepingcomputer.com · CVE Record https://www.bleepingcomputer.com/news/google/google-fixes-another-chr...
debian.org/security/2023/dsa-5496 debian.org · CVE Record https://www.debian.org/security/2023/dsa-5496
debian.org/security/2023/dsa-5497 debian.org · CVE Record https://www.debian.org/security/2023/dsa-5497
lists.fedoraproject.org/archives/list/[email protected]... lists.fedoraproject.org · CVE Record https://lists.fedoraproject.org/archives/list/package-announce@lists....
lists.fedoraproject.org/archives/list/[email protected]... lists.fedoraproject.org · CVE Record https://lists.fedoraproject.org/archives/list/package-announce@lists....
lists.fedoraproject.org/archives/list/[email protected]... lists.fedoraproject.org · CVE Record https://lists.fedoraproject.org/archives/list/package-announce@lists....
lists.debian.org/debian-lts-announce/2023/09/msg00015.html lists.debian.org · CVE Record https://lists.debian.org/debian-lts-announce/2023/09/msg00015.html
lists.fedoraproject.org/archives/list/[email protected]... lists.fedoraproject.org · CVE Record https://lists.fedoraproject.org/archives/list/package-announce@lists....
debian.org/security/2023/dsa-5498 debian.org · CVE Record https://www.debian.org/security/2023/dsa-5498
security.gentoo.org/glsa/202309-05 security.gentoo.org · CVE Record https://security.gentoo.org/glsa/202309-05
lists.debian.org/debian-lts-announce/2023/09/msg00016.html lists.debian.org · CVE Record https://lists.debian.org/debian-lts-announce/2023/09/msg00016.html
lists.fedoraproject.org/archives/list/[email protected]... lists.fedoraproject.org · CVE Record https://lists.fedoraproject.org/archives/list/package-announce@lists....
adamcaudill.com/2023/09/14/whose-cve-is-it-anyway adamcaudill.com · CVE Record https://adamcaudill.com/2023/09/14/whose-cve-is-it-anyway/
GitHub — webmproject/libwebp github.com · CVE Record https://github.com/webmproject/libwebp/releases/tag/v1.3.2
lists.debian.org/debian-lts-announce/2023/09/msg00017.html lists.debian.org · CVE Record https://lists.debian.org/debian-lts-announce/2023/09/msg00017.html
lists.fedoraproject.org/archives/list/[email protected]... lists.fedoraproject.org · CVE Record https://lists.fedoraproject.org/archives/list/package-announce@lists....
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/21/4
blog.isosceles.com/the-webp-0day blog.isosceles.com · CVE Record https://blog.isosceles.com/the-webp-0day/
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/22/1
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/22/3
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/22/4
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/22/5
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/22/8
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/22/7
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/22/6
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/26/1
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/26/7
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/28/1
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/28/2
OSS-Security Mailing List openwall.com · CVE Record http://www.openwall.com/lists/oss-security/2023/09/28/4
security.netapp.com/advisory/ntap-20230929-0011 security.netapp.com · CVE Record https://security.netapp.com/advisory/ntap-20230929-0011/
lists.fedoraproject.org/archives/list/[email protected]... lists.fedoraproject.org · CVE Record https://lists.fedoraproject.org/archives/list/package-announce@lists....
sethmlarson.dev/security-developer-in-residence-weekly-repor... sethmlarson.dev · CVE Record https://sethmlarson.dev/security-developer-in-residence-weekly-report-16
bentley.com/advisories/be-2023-0001 bentley.com · CVE Record https://www.bentley.com/advisories/be-2023-0001/
security.gentoo.org/glsa/202401-10 security.gentoo.org · CVE Record https://security.gentoo.org/glsa/202401-10

Recommended Actions

Prioritize remediation. Validate affected assets and apply vendor fixes on an accelerated timeline.
Check enrichment artifacts for scanner coverage and available PoCs before rolling remediation validation.
Use the Pro API to automate enrichment, telemetry, and workflow delivery for VM, SOC, and CTI pipelines.

Known Exploited Vulnerability Sources

Catalogues that list this CVE as a known exploited vulnerability.

Per-source evidence links for KEV attestations are available through the KEVIntel Pro API.

Learn about Pro API access

Source	Added
CISA First	2023-09-13 00:00 UTC

CVSS Scores

CVSS v3.1 8.8 High

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Exploitation Status

Exploited in the wild

Recorded 2023-09-13 00:00:00 UTC · CISA

Proof of concept available

Recorded 2023-09-21 05:22:51 UTC · GitHub

Weaknesses (CWE)

CWE-787

Out-of-bounds Write

Scanner Integrations

Scanner	Reference	Detected
Nessus	https://www.tenable.com/plugins/nessus/236729	Jun 02, 2025

Potential Proof of Concepts

These PoCs are unverified and could contain malware. Use at your own risk.

CrackerCat/CVE-2023-4863-

github · Created 2024-02-04 01:33:53 UTC · 0 stars

Triggering the famous libweb 0day vuln with libfuzzer

LiveOverflow/webp-CVE-2023-4863

github · Created 2023-12-18 23:12:25 UTC · 48 stars

huiwen-yayaya/CVE-2023-4863

github · Created 2023-11-11 06:51:03 UTC · 2 stars

talbeerysec/BAD-WEBP-CVE-2023-4863

github · Created 2023-09-25 22:10:32 UTC · 2 stars

BAD-WEBP-CVE-2023-4863

bbaranoff/CVE-2023-4863

github · Created 2023-09-25 10:33:09 UTC · 6 stars

mistymntncop/CVE-2023-4863

github · Created 2023-09-21 05:22:51 UTC · 314 stars

Automate This Intelligence with the Pro API

Confidence scoring, exploit status, sensor telemetry, PoCs, scanner integrations, mentions, and tags are available programmatically for VM, SOC, and CTI workflows.

View Pro Pricing View API Docs

Pro API Example

GET /api/v2/pro/kevs/CVE-2023-4863

{
  "cve_id": "CVE-2023-4863",
  "title": "Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and ...",
  "affected_vendor": "Google",
  "affected_product": "Chrome, libwebp",
  "affected_versions": [
    { "vendor": "...", "product": "...", "status": "affected", "display_label": "..." }
  ],
  "confidence": "Confirmed",
  "cvss_score": 8.8,
  "epss_score": null,
  "exploit_status": {
    "exploited_in_the_wild": true,
    "active_exploitation_observed": false
  },
  "sensor_telemetry": { "...": "Pro API fields" },
  "proof_of_concepts": [ "..." ],
  "scanner_integrations": [ "..." ]
}

The free JSON API returns basic KEV fields only. Confidence, telemetry, and artifact enrichment require Pro API access.

CVE-2023-4863

At a Glance

Affected Versions

CVE References

Recommended Actions

Known Exploited Vulnerability Sources

Virtual Patch

CVSS Scores

Exploitation Status

Weaknesses (CWE)

Scanner Integrations

Potential Proof of Concepts

Timeline

Automate This Intelligence with the Pro API