The vulnerability of the ChromeOS Audio Server component of Google Chrome browsers on ChromeOS and ChromeOS Flex operating systems allows a hacker to execute arbitrary code.

The vulnerability of the ChromeOS Audio Server component in Google Chrome browsers, as well as in ChromeOS and ChromeOS Flex operating systems, is caused by a buffer overflow in the queue. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using a specially created...

Google Chrome on ChromeOS Code Execution Vulnerability

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome on ChromeOS. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system...

CVE-2023-2457

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. Chromium security severity: High...

CVE-2023-2457

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. Chromium security severity: High...

CVE-2023-2458

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. Chromium security severity: High...

Design/Logic Flaw

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. Chromium security severity: High...

Design/Logic Flaw

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. Chromium security severity: High...

CVE-2023-2457

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. Chromium security severity: High...

CVE-2023-2457

The CVE-2023-2457 issue is an out-of-bounds/write condition in the ChromeOS Audio Server on ChromeOS, linked to heap corruption via a crafted audio file. Affected product: ChromeOS Audio Server within Google Chrome on ChromeOS, with the vulnerability described as present in versions prior to 113....

CVE-2023-2458

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. Chromium security severity: High...

CVE-2023-2458

Use after free in ChromeOS Camera in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker who convinced a user to engage in specific UI interaction to potentially exploit heap corruption via UI interaction. Chromium security severity: High...

CVE-2023-2458

CVE-2023-2458 describes a use-after-free in ChromeOS Camera within Google Chrome on ChromeOS, prior to 113.0.5672.114, enabling a remote attacker who persuades UI interaction to trigger heap corruption. Connected sources corroborate the same description; no exploit code or live-attack data is pro...

CVE-2023-2457

Out of bounds write in ChromeOS Audio Server in Google Chrome on ChromeOS prior to 113.0.5672.114 allowed a remote attacker to potentially exploit heap corruption via crafted audio file. Chromium security severity: High...

Google Chrome 资源管理错误漏洞

Google Chrome is a web browser from Google, an American company. A memory misreference vulnerability exists in Google Chrome on ChromeOS versions prior to 113.0.5672.114. An attacker can exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system...

Google Chrome 缓冲区错误漏洞

Google Chrome is a web browser from Google, an American company. A code execution vulnerability exists in Google Chrome on ChromeOS. An attacker could exploit this vulnerability to execute arbitrary code or cause a denial of service condition on the system...

Stable Channel Update for ChromeOS / ChromeOS Flex

The Stable channel is being updated to 15393.48.0 Platform version: 113.0.5672.114 for most ChromeOS devices and will be rolled out over the next few days. This build contains a number of bug fixes and security updates. If you find new issues, please let us know one of the following ways: File a...

PT-2023-2771 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 113.0.5672.114 Description: The issue is caused by an out of bounds write in the ChromeOS Audio Server, allowing a remote attacker to potentially exploit heap corruption via a crafted audio file. Th...

PT-2023-2885 · Google +1 · Google Chrome +1

Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 113.0.5672.114 Description: The issue is related to a use after free in the ChromeOS Camera component, which could allow a remote attacker to potentially exploit heap corruption via specific UI...

PT-2023-8236 · Google · Google Chrome

Name of the Vulnerable Software and Affected Versions: Google Chrome on ChromeOS versions prior to 114.0.5735.90 Description: The issue is related to insufficient policy enforcement in the Android Debug Bridge ADB component of Google Chrome on ChromeOS. This allows a local attacker with physical...

Debian DSA-5398-1 : chromium - security update

The remote Debian 11 host has packages installed that are affected by multiple vulnerabilities as referenced in the dsa-5398 advisory. - Inappropriate implementation in Prompts in Google Chrome prior to 113.0.5672.63 allowed a remote attacker to bypass permission restrictions via a crafted HTML...