CVE-2023-2457

2023-05-1217:36:05

Chrome

www.cve.org

chromeos

audio server

google chrome

remote attacker

heap corruption

crafted audio file

0.002 Low

EPSS

Percentile

56.6%

JSON

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. (Chromium security severity: High)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "113.0.5672.114",
        "status": "affected",
        "lessThan": "113.0.5672.114",
        "versionType": "custom"
      }
    ]
  }
]

References

chromereleases.googleblog.com/2023/05/stable-channel-update-for-chromeos.html

crbug.com/1420790

0.002 Low

EPSS

Percentile

56.6%

JSON

Related for CVELIST:CVE-2023-2457