CVE-2023-3421: Use after free in Media

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3421 (Advisory)
• https://security-tracker.debian.org/tracker/CVE-2023-3421
• https://chromereleases.googleblog.com/2023/06/stable-channel-update-for-desktop_26.html (Advisory)
• https://crbug.com/1447568
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/KREKCQTJDVI2AEBG5ECZPSOQXIC2L5XL/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/UBAHED5YFJPRGSEKNZIYHZBGSVHGEHOH/
• https://www.debian.org/security/2023/dsa-5440
• https://www.talosintelligence.com/vulnerability_reports/TALOS-2023-1751
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 2835446271078137830

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-3420
• CVE-2023-3422

Frequently Asked Questions

• What is the severity of CVE-2023-3421?

  CVE-2023-3421 has a high severity rating due to its potential for exploitation through a use after free vulnerability.

• How do I fix CVE-2023-3421?

  To fix CVE-2023-3421, update your Chromium-based browsers like Google Chrome and Microsoft Edge to their latest versions.

• Which versions of Chromium are affected by CVE-2023-3421?

  CVE-2023-3421 affects Chromium versions prior to 114.0.5735.198.

• Is Microsoft Edge (Chromium-based) impacted by CVE-2023-3421?

  Yes, Microsoft Edge (Chromium-based) is impacted by CVE-2023-3421 and needs to be updated accordingly.

• What type of vulnerability is CVE-2023-3421?

  CVE-2023-3421 is classified as a use after free vulnerability, which can lead to memory corruption.