CVE-2023-4863 PoC — Google Chrome 缓冲区错误漏洞

Source

https://github.com/mistymntncop/CVE-2023-4863

Associated Vulnerability

Title:Google Chrome 缓冲区错误漏洞 (CVE-2023-4863)
Description:Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Readme

# CVE-2023-4863/CVE-2023-41064
A POC for CVE-2023-4863. NOT an exploit
Shout to @benhawkes who discovered the right set of code_lengths to trigger this vulnerability!
Please consult Ben's blog post for more information!
https://blog.isosceles.com/the-webp-0day/

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →