CVE-2023-4863 PoC — Google Chrome 缓冲区错误漏洞

Source

https://github.com/LiveOverflow/webp-CVE-2023-4863

Associated Vulnerability

Title:Google Chrome 缓冲区错误漏洞 (CVE-2023-4863)
Description:Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Readme

# libwebp CVE-2023-4863

- [A Vulnerability to Hack The World - CVE-2023-4863](https://www.youtube.com/watch?v=lAyhKaclsPM)
- [Finding The .webp Vulnerability in 8s (Fuzzing with AFL++)](https://www.youtube.com/watch?v=PJLWlmp8CDM)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →