CVE-2023-4863High · CVSS 8.8EPSS 99.98%In KEVFix availableCVE-2023-4863Heap buffer overflow in libwebp in Google Chrome prior to 116.0.5845.187 and libwebp 1.3.2 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)libwebp-sysUpdate to 0.9.3Published September 12, 2023Updated October 21, 2025Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗