CVE-2023-2932: Use after free in PDF

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-2932 (Advisory)
• https://security-tracker.debian.org/tracker/CVE-2023-2932
• https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html (Advisory)
• https://crbug.com/1444581
• https://security.gentoo.org/glsa/202311-11
• https://www.debian.org/security/2023/dsa-5418
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 77713930894877776

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-2929
• CVE-2023-2930
• CVE-2023-3598
• CVE-2023-2931
• CVE-2023-2933
• CVE-2023-2934
• CVE-2023-2935
• CVE-2023-2936
• CVE-2023-2937
• CVE-2023-2938
• CVE-2023-2939
• CVE-2023-2940
• CVE-2023-2941

Frequently Asked Questions

• What is the severity of CVE-2023-2932?

  CVE-2023-2932 has been rated as a medium severity vulnerability due to the potential for exploitation through a use after free condition.

• How do I fix CVE-2023-2932?

  To fix CVE-2023-2932, update your Chromium-based browser to the latest version that contains the security patch.

• Which software is affected by CVE-2023-2932?

  CVE-2023-2932 affects Chromium-based browsers, including Google Chrome and Microsoft Edge.

• Can CVE-2023-2932 lead to data exposure?

  Yes, CVE-2023-2932 may lead to data exposure due to potential exploitation of the vulnerability.

• Is there a workaround for CVE-2023-2932 until a fix is applied?

  There are no known effective workarounds for CVE-2023-2932, so it is recommended to update to a secure version as soon as possible.