Google Chrome libvpx Heap Buffer Overflow Vulnerability

Google Chromium libvpx Heap Buffer Overflow Vulnerability

AND
     OR
          *cpe:2.3:a:webmproject:libvpx:1.13.1:*:*:*:*:*:*:*
     OR
          cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* versions up to (excluding) 117.0.5938.132
          cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* versions up to (excluding) 118.0.1
          cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:* versions up to (excluding) 118.1
          cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* versions up to (excluding) 115.3.1
          cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:androi

AND
     OR
          *cpe:2.3:a:webmproject:libvpx:*:*:*:*:*:*:*:* versions up to (excluding) 1.13.1
     OR
          cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* versions up to (excluding) 117.0.5938.132
          cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* versions up to (excluding) 118.0.1
          cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:* versions up to (excluding) 118.1
          cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* versions up to (excluding) 115.3.1
          cpe:2.3:a:mozilla:f

https://security.gentoo.org/glsa/202401-34 No Types Assigned

https://security.gentoo.org/glsa/202401-34 Third Party Advisory

Chrome https://security.gentoo.org/glsa/202401-34 [No types assigned]

OR
     *cpe:2.3:o:apple:ipad_os:16.7:*:*:*:*:*:*:*
     *cpe:2.3:o:apple:ipad_os:*:*:*:*:*:*:*:* versions from (including) 17.0 up to (excluding) 17.0.3
     *cpe:2.3:o:apple:iphone_os:16.7:*:*:*:*:*:*:*
     *cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:* versions from (including) 17.0 up to (excluding) 17.0.3

https://support.apple.com/kb/HT213961 No Types Assigned

https://support.apple.com/kb/HT213961 Third Party Advisory

https://support.apple.com/kb/HT213972 No Types Assigned

https://support.apple.com/kb/HT213972 Third Party Advisory

Chrome https://support.apple.com/kb/HT213972 [No types assigned]

Chrome https://support.apple.com/kb/HT213961 [No types assigned]

OR
     *cpe:2.3:a:microsoft:edge:116.0.1938.98:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:edge:117.0.2045.47:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:edge_chromium:116.0.5845.229:*:*:*:*:*:*:*
     *cpe:2.3:a:microsoft:edge_chromium:117.0.5938.132:*:*:*:*:*:*:*

OR
     *cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* versions up to (excluding) 118.0.1
     *cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:* versions up to (excluding) 118.1
     *cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* versions up to (excluding) 115.3.1
     *cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:android:*:* versions up to (excluding) 118.1
     *cpe:2.3:a:mozilla:thunderbird:*:*:*:*:*:*:*:* versions up to (excluding) 115.3.1

OR
     *cpe:2.3:o:debian:debian_linux:10.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:*
     *cpe:2.3:o:debian:debian_linux:12.0:*:*:*:*:*:*:*

OR
     *cpe:2.3:o:fedoraproject:fedora:37:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:*
     *cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*

http://seclists.org/fulldisclosure/2023/Oct/12 No Types Assigned

http://seclists.org/fulldisclosure/2023/Oct/12 Mailing List, Third Party Advisory

http://seclists.org/fulldisclosure/2023/Oct/16 No Types Assigned

http://seclists.org/fulldisclosure/2023/Oct/16 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/29/11 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/29/11 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/29/12 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/29/12 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/29/14 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/29/14 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/29/7 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/29/7 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/29/9 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/29/9 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/30/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/30/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/30/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/30/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/30/3 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/30/3 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/30/4 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/30/4 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/30/5 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/30/5 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/01/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/10/01/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/01/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/10/01/2 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/01/5 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/10/01/5 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/02/6 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/10/02/6 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/10/03/11 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/10/03/11 Mailing List, Third Party Advisory

https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ No Types Assigned

https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ Third Party Advisory

https://bugzilla.redhat.com/show_bug.cgi?id=2241191 No Types Assigned

https://bugzilla.redhat.com/show_bug.cgi?id=2241191 Issue Tracking, Third Party Advisory

https://crbug.com/1486441 Permissions Required

https://crbug.com/1486441 Issue Tracking, Permissions Required

https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590 No Types Assigned

https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590 Patch

https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282 No Types Assigned

https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282 Patch

https://github.com/webmproject/libvpx/releases/tag/v1.13.1 No Types Assigned

https://github.com/webmproject/libvpx/releases/tag/v1.13.1 Release Notes

https://github.com/webmproject/libvpx/tags No Types Assigned

https://github.com/webmproject/libvpx/tags Product

https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html Mailing List

https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html Mailing List

https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html No Types Assigned

https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/ Mailing List

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ No Types Assigned

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ Mailing List

https://pastebin.com/TdkC4pDv No Types Assigned

https://pastebin.com/TdkC4pDv Not Applicable

https://security-tracker.debian.org/tracker/CVE-2023-5217 No Types Assigned

https://security-tracker.debian.org/tracker/CVE-2023-5217 Patch, Third Party Advisory

https://security.gentoo.org/glsa/202310-04 No Types Assigned

https://security.gentoo.org/glsa/202310-04 Third Party Advisory

https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/ No Types Assigned

https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/ Third Party Advisory

https://twitter.com/maddiestone/status/1707163313711497266 No Types Assigned

https://twitter.com/maddiestone/status/1707163313711497266 Third Party Advisory

https://www.debian.org/security/2023/dsa-5508 No Types Assigned

https://www.debian.org/security/2023/dsa-5508 Third Party Advisory

https://www.debian.org/security/2023/dsa-5509 No Types Assigned

https://www.debian.org/security/2023/dsa-5509 Third Party Advisory

https://www.debian.org/security/2023/dsa-5510 No Types Assigned

https://www.debian.org/security/2023/dsa-5510 Third Party Advisory

https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ No Types Assigned

https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ Third Party Advisory

https://www.openwall.com/lists/oss-security/2023/09/28/5 No Types Assigned

https://www.openwall.com/lists/oss-security/2023/09/28/5 Mailing List, Third Party Advisory

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/TE7F54W5O5RS4ZMAAC7YK3CZWQXIDSKB/ [No Types Assigned]

http://seclists.org/fulldisclosure/2023/Oct/16 [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2023/10/msg00015.html [No Types Assigned]

http://seclists.org/fulldisclosure/2023/Oct/12 [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AY642Z6JZODQJE7Z62CFREVUHEGCXGPD/ [No Types Assigned]

https://security.gentoo.org/glsa/202310-04 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/10/03/11 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/10/02/6 [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4MFWDFJSSIFKWKNOCTQCFUNZWAXUCSS4/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/55YVCZNAVY3Y5E4DWPWMX2SPKZ2E5SOV/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/CWEJYS5NC7KVFYU3OAMPKQDYN6JQGVK6/ [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WTRUIS3564P7ZLM2S2IH4Y4KZ327LI4I/ [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2023/10/msg00001.html [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/10/01/5 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/10/01/1 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/10/01/2 [No Types Assigned]

https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/BCVSHVX2RFBU3RMCUFSATVQEJUFD4Q63/ [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/30/5 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/30/4 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/30/2 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/30/3 [No Types Assigned]

https://github.com/webmproject/libvpx/releases/tag/v1.13.1 [No Types Assigned]

https://arstechnica.com/security/2023/09/new-0-day-in-chrome-and-firefox-is-likely-to-plague-other-software/ [No Types Assigned]

https://twitter.com/maddiestone/status/1707163313711497266 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/30/1 [No Types Assigned]

https://lists.debian.org/debian-lts-announce/2023/09/msg00038.html [No Types Assigned]

https://www.debian.org/security/2023/dsa-5508 [No Types Assigned]

https://www.debian.org/security/2023/dsa-5509 [No Types Assigned]

https://www.debian.org/security/2023/dsa-5510 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/29/14 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/29/11 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/29/12 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/29/9 [No Types Assigned]

https://bugzilla.redhat.com/show_bug.cgi?id=2241191 [No Types Assigned]

https://github.com/webmproject/libvpx/commit/3fbd1dca6a4d2dad332a2110d646e4ffef36d590 [No Types Assigned]

https://github.com/webmproject/libvpx/commit/af6dedd715f4307669366944cca6e0417b290282 [No Types Assigned]

https://github.com/webmproject/libvpx/tags [No Types Assigned]

https://pastebin.com/TdkC4pDv [No Types Assigned]

https://security-tracker.debian.org/tracker/CVE-2023-5217 [No Types Assigned]

https://stackdiary.com/google-discloses-a-webm-vp8-bug-tracked-as-cve-2023-5217/ [No Types Assigned]

https://www.mozilla.org/en-US/security/advisories/mfsa2023-44/ [No Types Assigned]

https://www.openwall.com/lists/oss-security/2023/09/28/5 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/29/7 [No Types Assigned]

AND
     OR
          *cpe:2.3:a:webmproject:libvpx:1.13.1:*:*:*:*:*:*:*
     OR
          cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* versions up to (excluding) 117.0.5938.132
          cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:* versions up to (excluding) 118.0.1
          cpe:2.3:a:mozilla:firefox:*:*:*:*:*:android:*:* versions up to (excluding) 118.1
          cpe:2.3:a:mozilla:firefox_esr:*:*:*:*:*:*:*:* versions up to (excluding) 115.3.1
          cpe:2.3:a:mozilla:firefox_focus:*:*:*:*:*:androi

NIST AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NIST CWE-787

http://www.openwall.com/lists/oss-security/2023/09/28/5 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/28/5 Mailing List, Patch, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/28/6 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/28/6 Mailing List, Patch, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/29/1 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/29/1 Mailing List, Third Party Advisory

http://www.openwall.com/lists/oss-security/2023/09/29/2 No Types Assigned

http://www.openwall.com/lists/oss-security/2023/09/29/2 Mailing List, Third Party Advisory

https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html No Types Assigned

https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop_27.html Release Notes, Vendor Advisory

https://crbug.com/1486441 No Types Assigned

https://crbug.com/1486441 Permissions Required

http://www.openwall.com/lists/oss-security/2023/09/29/1 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/29/2 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/28/6 [No Types Assigned]

http://www.openwall.com/lists/oss-security/2023/09/28/5 [No Types Assigned]