Constellation · CASCA

Constellation explorer

Every signal has a story.Follow the evidence.

Return to triage

Find a CVE by identifier or text

↵ select

Minimum eligible CVSSOrderKEV only

Start with evidence

Current exploration

CVE-2023-5217

Your trail

Where next?

Selected cve

CVE-2023-5217

Heap buffer overflow in vp8 encoding in libvpx in Google Chrome prior to 117.0.5938.132 and libvpx 1.13.1 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

23 retained evidence references · snapshot-bound · open authoritative view

StateSource-scoped evidence

Priority85.0–85.7

Coverage98.7%

Connections13

Choose an action.

Evidence state

identity unresolved
known present
evidence unknown

Snapshot-bound reason tuple

Evidence supportedfactor_a_kev

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_b_epss

Eligible evidence is present for this bounded claim.

Revision: evidence-policy-v1.1.0
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Evidence supportedfactor_c_cvss

Eligible evidence is present for this bounded claim.

Revision: casca-direct-cvss-eligibility-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: None

Source-reported scopefactor_d_breadth

The source assertion is retained, but its canonical identity is unresolved.

Revision: casca-factor-d-obligations-v1
Cutoff: 2026-08-27T18:09:02.177Z
Resolution: Resolve identity

Connections 13

has cited scope1 retained · stored CVE-2023-5217 → Google · libvpx

5ebec9f7-b429-418c-88cd-56b58724e3c8

has cited scope1 retained · stored CVE-2023-5217 → Google · Chrome

3934c373-9e3c-4ae7-8efe-7eb3810be20b

has vulnerable target scope3 retained · stored CVE-2023-5217 → mozilla · firefox

07a50476-ad09-47a1-aaf5-c5ccaed7c3316531de53-7e1d-4b70-bca6-570c2541911b9436d482-0146-4304-8722-4431198c8801

has vulnerable target scope1 retained · stored CVE-2023-5217 → mozilla · thunderbird

444aca14-0124-4523-ae95-77b933342b66

has vulnerable target scope2 retained · stored CVE-2023-5217 → microsoft · edge_chromium

6189ba47-bd16-41bc-8516-c855e90a74b6adfcf744-a6c5-4331-aea4-1a3cca6d5680

has vulnerable target scope2 retained · stored CVE-2023-5217 → microsoft · edge

1d4713dc-befa-4285-a751-063b2f8decbdc7228ef7-88dd-4443-8908-eb911102993a

has vulnerable target scope3 retained · stored CVE-2023-5217 → debian · debian_linux

84b625b6-7a4a-469b-a863-2e21931659f0eb23d138-0c1b-4f56-aab1-a3fe171f3333fbdce41f-96ce-40ff-bc5d-443404251b07

has vulnerable target scope1 retained · stored CVE-2023-5217 → google · chrome

44a4e617-2216-4c07-bd7b-18521e801f44

has vulnerable target scope2 retained · stored CVE-2023-5217 → apple · iphone_os

b7335eb8-8770-4a09-9b02-5208b81a66ddf4426d5e-21f1-4e7d-97ff-4238e1f2621d

has vulnerable target scope1 retained · stored CVE-2023-5217 → webmproject · libvpx

0454afa0-2409-4534-a9d0-3f4a6749c66a

has vulnerable target scope2 retained · stored CVE-2023-5217 → apple · ipados

2d0fc4b6-8e7a-4f3c-a3f4-34acf7f3d1db41c695c8-a982-4475-902f-1b2d33615840

has vulnerable target scope3 retained · stored CVE-2023-5217 → fedoraproject · fedora

0494889b-25f5-420e-8f9a-7f5e185e63bd3aefb832-9f42-4b44-9883-d19434922ad8f6dc0e26-cbeb-45c6-be35-f30d95539c8b

has vulnerable target scope1 retained · stored CVE-2023-5217 → redhat · enterprise_linux

50f7b148-c95e-4946-8870-55b2c7ea8363

Focused snapshot evidence neighborhood.

CVEProductSignalSelected / traceVisual proximity carries zero evidence weight.

Data as of

Evidence current through Aug 27, 2026, 6:09 PM UTC · 14 entities · 13 relationships · bounded complete