Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (Chromium security severity: High)
References
Configurations
History
31 Jan 2024, 17:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Dec 2023, 02:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
16 Dec 2023, 01:41
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-416 | |
CVSS |
v2 : v3 : |
v2 : unknown
v3 : 8.8 |
CPE | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | |
First Time |
Google
Google chrome |
|
References | () https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_12.html - Release Notes, Vendor Advisory | |
References | () https://crbug.com/1504792 - Permissions Required | |
Summary |
|
14 Dec 2023, 22:44
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2023-12-14 22:15
Updated : 2024-01-31 17:15
NVD link : CVE-2023-6704
Mitre link : CVE-2023-6704
CVE.ORG link : CVE-2023-6704
JSON object : View
Products Affected
- chrome
CWE
CWE-416
Use After Free