CVE-2023-4072

2023-08-0300:27:47

Chrome

www.cve.org

cve-2023-4072

google chrome

webgl

heap corruption

crafted html page

remote attacker

out of bounds read

out of bounds write

chromium

high severity

8.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CNA Affected

[
  {
    "vendor": "Google",
    "product": "Chrome",
    "versions": [
      {
        "version": "115.0.5790.170",
        "status": "affected",
        "lessThan": "115.0.5790.170",
        "versionType": "custom"
      }
    ]
  }
]