PT-2023-4477 · Google+2 · Google Chrome+2

Publicado

2023-08-15

·

Atualizado

2024-11-29

·

CVE-2023-2312

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 116.0.5845.96
Description The issue is related to a use after free in the Offline mode of Google Chrome on Android, which could allow a remote attacker who has compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The severity of this issue is considered High.
Recommendations For Google Chrome on Android versions prior to 116.0.5845.96, update to version 116.0.5845.96 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages until the update is applied.

Correção

Use After Free

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-416

Identificadores relacionados

ALT-PU-2023-5067
ALT-PU-2023-5296
ALT-PU-2023-5790
ALT-PU-2023-6281
ALT-PU-2023-6350
ALT-PU-2023-6351
ALT-PU-2023-6567
ALT-PU-2024-14286
ALT-PU-2024-14830
BDU:2023-04872
CVE-2023-2312
DSA-5479-1
OPENSUSE-SU-2023:0234-1
OPENSUSE-SU-2023:0251-1
OPENSUSE-SU-2023_0251-1
OPENSUSE-SU-2024:13139-1
OPENSUSE-SU-2024:13144-1

Produtos afetados

Alt Linux
Google Chrome
Suse