Recorded 14 Oct 2026 at 10:19 UTC. This is what ChangeIntel recorded, including the title, summary, facts and links. It is not a statement of the source's current position. See the latest record.
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Google Chromium WebP contains a heap-based buffer overflow vulnerability that allows a remote attacker to perform an out-of-bounds memory write via a crafted HTML page. This vulnerability can affect applications that use the WebP Codec.
What it said
- CVE
- CVE-2023-4863
- Vendor
- Product
- Chromium WebP
- CISA KEV
- Listed 13 Sep 2023
- Known ransomware use
- Not stated
- Federal remediation due
- 4 Oct 2023
Recorded links
Source evidence when recorded
- CISA KEV
- Complete at observationRead 14 Oct 2026 at 10:18 UTC
Coverage describes the sources at this observation. A complete read then does not establish their current position.
What changed
First observed 14 Oct 2026No field changes in the recorded history.
Cite this recorded revision to keep the same title, summary, facts and links when the page changes.
A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.