Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bo
- Published
- Last modified
- Where the record stands: published, rejected by its publisher, or superseded by another id.What do these mean? →
- published
- Whether CISA lists it in its Known Exploited Vulnerabilities catalog: proof that attackers are using it.What do these mean? →
- Listed in CISA KEV
- Fix
- Fixed in 116.0.5845.187, 1.3.2, 0.1.8, 0.9.3, 22.3.24, and 11 more
- Whether working attack code is public (Exploit-DB, Metasploit, Nuclei or GitHub). Public code makes attacks easier.What do these mean? →
- None on Exploit-DB, Metasploit or GitHub
Summary
This vulnerability affects Google Chrome and the libwebp image-decoding library, which are used to process WebP images. An attacker could exploit it by tricking a user into opening a specially crafted web page, allowing them to write data outside the intended memory area and potentially run malicious code.
Summarized by anthropic/claude-haiku-5.5. Verify details against the original sources.
Read the original description
Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
Timeline
- CVE published
- Added to CISA KEV
CISA has evidence of exploitation in the wild
- CISA remediation deadline
Due date for US federal agencies to patch
- Record last updated
- EPSS reached 10%
FIRST estimates at least a 10% chance of exploitation in the next 30 days
- cve.now early warning
CISA advisory reports Mitsubishi Electric industrial software vulnerabilities
Affected versions
- Google Chrome
From 116.0.5845.187 · fixed in 116.0.5845.187
- Google libwebp
From 1.3.2 · fixed in 1.3.2
- libwebp-sys2crates.io
fixed in 0.1.8
- libwebp-syscrates.io
fixed in 0.9.3
- electronnpm
From 22.0.0 · fixed in 22.3.24
- electronnpm
From 24.0.0 · fixed in 24.8.3
- electronnpm
From 25.0.0 · fixed in 25.8.1
- electronnpm
From 26.0.0 · fixed in 26.2.1
- electronnpm
From 27.0.0-beta.1 · fixed in 27.0.0-beta.2
- SkiaSharpNuGet
From 2.0.0 · fixed in 2.88.6
- github.com/chai2010/webpGo
From 1.1.2 · fixed in 1.4.0
- pillowPyPI
fixed in 10.0.1
- webpcrates.io
fixed in 0.2.6
- magick.net-q16-anycpuNuGet
fixed in 13.3.0
- magick.net-q16-hdri-anycpuNuGet
fixed in 13.3.0
- magick.net-q16-x64NuGet
fixed in 13.3.0
- magick.net-q8-anycpuNuGet
fixed in 13.3.0
- magick.net-q8-openmp-x64NuGet
fixed in 13.3.0
- magick.net-q8-x64NuGet
fixed in 13.3.0
- github.com/chai2010/webpGo
fixed in 0.0.0-20250406010349-76805d5a8860
- github.com/chai2010/webpGo
From 0.0.0 · fixed in 1.1.2-0.20250406010349-76805d5a8860
- libwebp-sys2crates.io
From 0.0.0-0 · fixed in 0.1.8
- libwebp-syscrates.io
From 0.0.0-0 · fixed in 0.9.3
References 25
chromereleases.googleblog.com
crbug.com
en.bandisoft.com
stackdiary.com
mozilla.org
GitHub · webmproject/libwebp
msrc.microsoft.com
security-tracker.debian.org
bugzilla.suse.com
news.ycombinator.com
bleepingcomputer.com
lists.fedoraproject.org
- archives/list/package-announce@lists.fedoraproject.org/message/OZDGWWMJREPAGKWCJKSCM4WYLANSKIFX
- archives/list/package-announce@lists.fedoraproject.org/message/FYYKLG6CRGEDTNRBSU26EEWAO6D6U645
- archives/list/package-announce@lists.fedoraproject.org/message/PYZV7TMKF4QHZ54SFJX54BDN52VHGGCX
- archives/list/package-announce@lists.fedoraproject.org/message/WHOLML7N2G5KCAZXFWC5IDFFHSQS5SDB
- archives/list/package-announce@lists.fedoraproject.org/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT