CVE-2010-4203: Google Chrome

Critical severity, CVSS 9.8. EPSS: 4.6% chance of exploitation in the next 30 days.

WebM libvpx (aka the VP8 Codec SDK) before 0.9.5, as used in Google Chrome before 7.0.517.44, allows remote attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via invalid frames.

Affected products

• Google Chrome: before 7.0.517.44 (fixed in 7.0.517.44)
• Red Hat Enterprise Linux Desktop: version 6.0 only
• Red Hat Enterprise Linux Server: version 6.0 only
• Red Hat Enterprise Linux Workstation: version 6.0 only
• Webmproject Libvpx: before 0.9.5 (fixed in 0.9.5)

Published 2010-11-06. Last modified 2026-06-16.