CVE-2023-3497

2023-07-0316:54:10

Chrome

www.cve.org

google chrome

chrome os

security processor

firmware

denial of service

physical access

5.4 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

JSON

Out of bounds read in Google Security Processor firmware in Google Chrome on Chrome OS prior to 114.0.5735.90 allowed a local attacker to perform denial of service via physical access to the device. (Chromium security severity: Medium)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "114.0.5735.90",
        "status": "affected",
        "lessThan": "114.0.5735.90",
        "versionType": "custom"
      }
    ]
  }
]