-
CVSS Score
-Basic Information
CVE ID
-
GHSA ID
-
EPSS Score
-
CWE
-
Published
-
Updated
-
KEV Status
-
Technology
-
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI
C#C#| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| CefSharp.Common | nuget | < 116.0.230 | 116.0.230 |
| CefSharp.Common.NETCore | nuget | < 116.0.230 | 116.0.230 |
Miggo AIRoot Cause AnalysisThe vulnerability (CVE-2023-4863) resides in the Chromium WebP decoding implementation, which is part of the native code in the Chromium Embedded Framework (CEF) that CefSharp wraps. The provided commit diff and advisory information only show updates to CEF/Chromium dependencies (from 116.0.19 to 116.0.23) to include the patched version of Chromium. The actual vulnerable functions (e.g., WebP parsing logic in libwebp) are in Chromium's native code, not in the CefSharp .NET codebase itself. Since the question asks for functions 'present in the system' (CefSharp), and the vulnerability is in the underlying native library, no C#-level functions in the CefSharp packages are directly implicated. The fix involves updating the CEF dependency, not modifying CefSharp's managed code.