GHSA-4c29-gfrp-g6x9
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
GHSA-4c29-gfrp-g6x9 is a vulnerability with no CVSS score yet in CefSharp.Common, published October 5, 2023. No source lists public exploit code. Fixed in CefSharp.Common 117.2.20.
- Severity
- UnratedNo CVSS score yet
- Exploit chance
- UnscoredNo EPSS score yet
- Exploitation
- None knownNot on CISA’s or ENISA’s lists
- Fixed in
117.2.20CefSharp.Common +3 more
Description
Google is aware that an exploit for CVE-2023-5217 exists in the wild.
Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Affected packages
| Package | Affected | Fixed |
|---|---|---|
CefSharp.CommonNuGet | before 117.2.20 | 117.2.20 |
CefSharp.Common.NETCoreNuGet | before 117.2.20 | 117.2.20 |
CefSharp.CommonNuGet | before 117.2.20, plus listed versions 100.0.120-pre100.0.140100.0.230101.0.150101.0.180 Show 45 moreShow less102.0.100102.0.90103.0.120103.0.80103.0.90104.4.180104.4.240105.3.330105.3.390106.0.260106.0.290107.1.120107.1.40107.1.50107.1.90108.4.130109.1.110110.0.250110.0.280110.0.300111.2.20111.2.70112.2.70112.3.0113.1.40113.3.50114.2.100114.2.120115.3.110115.3.130116.0.130116.0.150116.0.190116.0.23031.0.0-pre133.0.033.0.233.1.0-pre0137.0.037.0.0-pre0137.0.0-pre0237.0.137.0.237.0.339.0.0 | 117.2.20 |
CefSharp.Common.NETCoreNuGet | before 117.2.20, plus listed versions 100.0.120-pre100.0.140100.0.230101.0.150101.0.180 Show 45 moreShow less102.0.100102.0.90103.0.120103.0.80103.0.90104.4.180104.4.240105.3.330105.3.390106.0.260106.0.290107.1.120107.1.40107.1.50107.1.90108.4.130109.1.110110.0.250110.0.280110.0.300111.2.20111.2.70112.2.70112.3.0113.1.40113.3.50114.2.100114.2.120115.3.110115.3.130116.0.130116.0.150116.0.190116.0.23087.1.130-pre87.1.131-pre87.1.13288.2.40-pre88.2.9089.0.140-pre89.0.17090.5.70-pre90.6.5090.6.7091.1.160 | 117.2.20 |
What each source reports
GitHub AdvisoriesNo score
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
Google is aware that an exploit for CVE-2023-5217 exists in the wild.
Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
- Record
GHSA-4c29-gfrp-g6x9- Updated
- 2026-11-02
OSVNo score
CefSharp affected by libvpx's heap buffer overflow in vp8 encoding
Google is aware that an exploit for CVE-2023-5217 exists in the wild.
Description Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
- Record
GHSA-4c29-gfrp-g6x9- Updated
- 2026-11-02
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
References
Left out here: 150 versions. The JSON record has them.