cve/2023/CVE-2023-5217.md

### [CVE-2023-5217](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-5217)
![](https://img.shields.io/static/v1?label=Product&message=Chrome&color=blue)
![](https://img.shields.io/static/v1?label=Product&message=libvpx&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=1.13.1%3C%201.13.1%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Version&message=117.0.5938.132%3C%20117.0.5938.132%20&color=brighgreen)
![](https://img.shields.io/static/v1?label=Vulnerability&message=Heap%20buffer%20overflow&color=brighgreen)

### Description

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

### POC

#### Reference
No PoCs from references.

#### Github
- https://github.com/Jereanny14/jereanny14.github.io
- https://github.com/Keeper-Security/gitbook-release-notes
- https://github.com/Ostorlab/KEV
- https://github.com/Ostorlab/known_exploited_vulnerbilities_detectors
- https://github.com/RENANZG/My-Debian-GNU-Linux
- https://github.com/RENANZG/My-Forensics
- https://github.com/Threekiii/CVE
- https://github.com/Trinadh465/platform_external_libvpx_v1.4.0_CVE-2023-5217
- https://github.com/Trinadh465/platform_external_libvpx_v1.8.0_CVE-2023-5217
- https://github.com/UT-Security/cve-2023-5217-poc
- https://github.com/fkie-cad/nvd-json-data-feeds
- https://github.com/nomi-sec/PoC-in-GitHub
- https://github.com/wrv/cve-2023-5217-poc