Google Issues Fix For High-Severity Chrome Zero Day

As part of a security update on Wednesday, Google fixed a heap buffer overflow issue in its Chrome browser that is being exploited in the wild.

The high-severity flaw (CVE-2023-5217) exists in the vp8 encoding in libvpx, a free software video codec library developed by Google and the Alliance for Open Media. While details for the flaw - which was reported by Clement Lecigne with Google’s Threat Analysis Group (TAG) - have not been disclosed, Google TAG security researcher Maddie …

alliance browser buffer buffer overflow chrome cve cve-2023-5217 encoding exploited fix flaw free free software google heap buffer overflow high issue library media overflow security security update severity software update video