CVE-2023-2931: Use after free in PDF

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2931 (Advisory)
• https://security-tracker.debian.org/tracker/CVE-2023-2931
• https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html (Advisory)
• https://crbug.com/1444238
• https://security.gentoo.org/glsa/202311-11
• https://www.debian.org/security/2023/dsa-5418
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 77713930894877776

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-2929
• CVE-2023-2930
• CVE-2023-3598
• CVE-2023-2932
• CVE-2023-2933
• CVE-2023-2934
• CVE-2023-2935
• CVE-2023-2936
• CVE-2023-2937
• CVE-2023-2938
• CVE-2023-2939
• CVE-2023-2940
• CVE-2023-2941

Frequently Asked Questions

• What is the severity of CVE-2023-2931?

  CVE-2023-2931 has been classified as a high-severity vulnerability due to its potential for causing exploitation through a use-after-free condition.

• How do I fix CVE-2023-2931?

  To mitigate CVE-2023-2931, users should update Google Chrome, Microsoft Edge Chromium, or Debian's Chromium packages to the latest available versions.

• Which software versions are affected by CVE-2023-2931?

  CVE-2023-2931 affects Google Chrome versions up to 114.0.5735.90, Microsoft Edge (Chromium-based) versions up to 114.0.1823.37, and Debian's Chromium version up to 90.0.4430.212.

• Is Microsoft Edge (Chromium-based) affected by CVE-2023-2931?

  Yes, Microsoft Edge (Chromium-based) is affected by CVE-2023-2931 and requires an update to the latest version to address the vulnerability.

• What type of vulnerability is CVE-2023-2931?

  CVE-2023-2931 is categorized as a 'use after free' vulnerability, which can lead to security issues such as memory corruption.