Out-of-bounds read In cefsharp.common
Description
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding Google is aware that an exploit for CVE-2023-5217 exists in the wild.
Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 nuget | 117.2.20 | ||
nuget | 117.2.20 |
Aliases
1. 2.
References
1. 2.