PT-2023-3715 · Google+2 · Google Chrome+2

Mark Brand

·

Published

2023-07-18

·

Updated

2024-11-29

·

CVE-2023-3732

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 115.0.5790.98
Description The issue is related to an out of bounds memory access in the Mojo library of Google Chrome, which can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page. This could enable the attacker to execute arbitrary code. The attacker must have compromised the renderer process to potentially exploit this issue.
Recommendations For versions prior to 115.0.5790.98, update to version 115.0.5790.98 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

Exploit

Fix

Memory Corruption

Improperly Implemented Security Check for Standard

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787CWE-358CWE-119

Related Identifiers

ALT-PU-2023-5002
ALT-PU-2023-5790
ALT-PU-2023-6281
ALT-PU-2023-6350
ALT-PU-2023-6351
ALT-PU-2023-6567
ALT-PU-2024-14286
ALT-PU-2024-14830
BDU:2023-04002
BDU:2023-04003
CVE-2023-3732
DSA-5456-1
OPENSUSE-SU-2023:0193-1
OPENSUSE-SU-2024:13059-1
OPENSUSE-SU-2024:13100-1
OPENSUSE-SU-2024:13125-1

Affected Products

Alt Linux
Astra Linux
Google Chrome