What is CVE-2023-5217?

CVE-2023-5217 is a security advisory published by Microsoft Security Response Center (MSRC). Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

Which CVE IDs does CVE-2023-5217 cover?

CVE-2023-5217 covers the following CVE IDs: CVE-2023-5217. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2023-5217?

CVE-2023-5217 affects 3 products, including: Microsoft Edge (Chromium-based); Microsoft Teams for Desktop; Microsoft Teams for Mac.

CVE-2023-5217

Chromium: CVE-2023-5217 Heap buffer overflow in vp8 encoding in libvpx

Vendor

Microsoft Security Response Center (MSRC)

Published

September 29, 2023

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2023-5217 →

📋 Description

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information. Google is aware that an exploit for CVE-2023-5217 exists in the wild.

🎯 Affected products3

Microsoft Edge (Chromium-based)
Microsoft Teams for Desktop
Microsoft Teams for Mac

✅ Remediation

KBRelease Notes (Security Update) — fixed build 116.0.1938.98 KBRelease Notes (Security Update) — fixed build 1.6.00.27573 KBRelease Notes (Security Update) — fixed build 1.6.00.27656

🔗 References (3)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-5217
referencehttps://docs.microsoft.com/en-us/DeployEdge/microsoft-edge-relnotes-security
referencehttps://learn.microsoft.com/en-us/officeupdates/teams-app-versioning