CVE-2023-3598: Out of bounds read and write in ANGLEDiscovered by a member of Apple Security Engineering and Architecture (SEAR) and reported by sisu from CTF team HXP
Published Mar 26, 2023
·Updated
Out of bounds read and write in ANGLE in Google Chrome prior to 114.0.5735.90 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Affected Software
2 affected componentsFixes available
Google Chrome<114.0.5735.90
114.0.5735.90
Google Chrome<114.0.5735.90
Event History
Mar 26, 2023
CVE Published
12:00 AM
Jul 28, 2023
CVE Published
via MITRE·08:06 PM
Data Sourced
via MITRE·08:06 PM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2023-3598?
The severity of CVE-2023-3598 is classified as High.
2
How do I fix CVE-2023-3598?
To fix CVE-2023-3598, update Google Chrome to version 114.0.5735.90 or later.
3
What impact does CVE-2023-3598 have on Google Chrome?
CVE-2023-3598 allows a remote attacker to potentially exploit heap corruption through a crafted HTML page.
4
What versions of Google Chrome are affected by CVE-2023-3598?
Google Chrome versions prior to 114.0.5735.90 are affected by CVE-2023-3598.
5
Is CVE-2023-3598 related to security vulnerabilities in ANGLE?
Yes, CVE-2023-3598 is an out of bounds read and write vulnerability specifically in ANGLE in Google Chrome.