CVE-2023-4863 | Netskope Threat Labs

Description

This detection identifies exploitation attempts targeting CVE-2023-4863, which has a HIGH severity rating. Heap buffer overflow in libwebp in Google Chrome before 116.0.5845.187 and libwebp 1.3.2 allowed a remote cyberattacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)

Stats

First seen: October 2023
Last seen: September 2026

CVEs

CVE-2023-4863

Alert name variants

Alert Name	Engine
Android.Exploit.CVE-2023-4863	ATP Sandbox Adv. Heuristics
Binary.Exploit.CVE-2023-4863	ATP Sandbox Adv. Heuristics
Exploit.CVE-2023-4863.A	AV
Exploit.CVE-2023-4863.Gen	AV
Image.Exploit.CVE-2023-4863	ATP Sandbox Adv. Heuristics
Win32.Exploit.CVE-2023-4863	ATP Sandbox Adv. Heuristics

Related IPS Signatures

Signature Name	Engine
FILE-IMAGE Multiple products libwebp remote code execution attempt	IPS-SWG

References

nvd.nist.gov