Chromium: CVE-2023-4072 Out of bounds read and write in WebGL

This CVE was assigned by Chrome. Microsoft Edge Chromium-based ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information...

Denial Of Service (DoS)

firefox and thunderbird are vulnerable to Denial of Service DoS attacks. This vulnerability occurs when Firefox parses a specially crafted WebGL program. If the program is invalid, Firefox could read data from outside of the allocated memory space which could lead to a crash...

Denial Of Service (DoS)

chromium is vulnerable to Denial Of Service DoS. The vulnerability exists due to the out of bounds read and write in the WebGL, allowing an attacker to exploit heap corruption via a crafted HTML page...

Use-After-Free

firefox and thunderbird are vulnerable to Use-After-Free. This vulnerability occurs when Firefox parses a specially crafted WebGL program. If the program is invalid, Firefox could free memory that is still in use. This could lead to a crash or arbitrary code execution...

Denial Of Service (DoS)

firefox and thunderbird are vulnerable to Denial of Service DoS attacks. This vulnerability occurs when Firefox parses a specially crafted WebGL program. If the program is invalid, Firefox could corrupt memory and crash which could lead to a denial-of-service attack...

Arbitrary Code Execution

firefox is vulnerable to Arbitrary Code Execution. This vulnerability occurs when Firefox parses a specially crafted WebGL program. If the program is invalid, Firefox could free memory that is still in use which could lead to a crash or arbitrary code execution...

Authorization Bypass

firefox and thunderbird are vulnerable to Authorization Bypasses. This vulnerability occurs when Firefox parses a specially crafted WebGL program. If the program is invalid, Firefox could misinterpret the data in the program and cause a type confusion error, which could lead to bypass...

Arbitrary Code Execution

chromium is vulnerable to Arbitrary Code Execution. The vulnerability occurs when chrome parses a specially crafted WebGL program. If the program is valid, chrome could free memory that is still in use which could lead to a crash or arbitrary code execution...

Use After Free

firefox is vulnerable to Use After Free. This vulnerability occurs when Firefox parses a specially crafted WebGL program. If the program is valid, Firefox could free memory that is still in use. This could lead to a crash or arbitrary code execution...

Google Chrome Code Execution Vulnerability (CNVD-2023-63468)

Google Chrome is a web browser from the American company Google. Google Chrome suffers from a code execution vulnerability that is caused by out-of-bounds reads and writes in WebGL. An attacker can exploit this vulnerability to execute arbitrary code on the system or cause an application to crash...

SUSE CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

DEBIAN-CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Design/Logic Flaw

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

CVE-2023-4072

Summary: CVE-2023-4072 is a WebGL-related out-of-bounds read/write vulnerability in Google Chrome/Chromium. The issue can enable a remote attacker to cause heap corruption via a crafted HTML page, with high impact as indicated by the CVSS vector (base score 8.8, Confidentiality/Integrity/Availabi...

CVE-2023-4072

Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...

Stable Channel Update for Desktop

The Stable channel has been updated to 115.0.5790.170 for Mac and Linux and 115.0.5790.170/.171 for Windows, which will roll out over the coming days/weeks. A full list of changes in this build is available in the log. Security Fixes and Rewards Note: Access to bug details and links may be kept...