CVE-2023-4863Vulnerability
Google Chromium WebP Heap-Based Buffer Overflow Vulnerability
Exploited in the wildCISA added it to its Known Exploited Vulnerabilities list on .
Reported by 1 independent source · first reported by Huntress · last reported
Last reported 3 years ago
CISA KEVAdded 13 Sep 2023
Fix due 4 Oct 2023
Used by ransomware: not knownCISA KEV catalogue
Fix due 4 Oct 2023
Used by ransomware: not knownCISA KEV catalogue
EPSS100.0%
higher than 99% of CVEsFIRST EPSS, as of 16 Oct 2026
higher than 99% of CVEsFIRST EPSS, as of 16 Oct 2026
What the reports say
1 report, newest first · the exact sentence from each-
Critical Vuln: WebP Heap Buffer Overflow CVE-2023-4863“Critical Vuln: WebP Heap Buffer Overflow CVE-2023-4863”
Indicators reported together
named in the same reports- hxxps://blog.isosceles[.]com/the-webp-0day/in 1 report
- blog.isosceles[.]comin 1 report
Copy these 2 indicators · defanged
Also named with it: CVE-2023-5129
Thanks — we review every report.