CVE-2023-3732: Out of bounds memory access in Mojo

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2023-3732 (Advisory)
• http://packetstormsecurity.com/files/174223/Chrome-IPCZ-FragmentDescriptors-Missing-Validation.html
• https://chromereleases.googleblog.com/2023/07/stable-channel-update-for-desktop.html (Advisory)
• https://crbug.com/1450899
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 1127106949487312592

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2023-3727
• CVE-2023-3728
• CVE-2023-3730
• CVE-2023-4860
• CVE-2023-3733
• CVE-2023-3734
• CVE-2023-3735
• CVE-2023-3736
• CVE-2023-3737
• CVE-2023-3738
• CVE-2023-3740

Frequently Asked Questions

• What is the severity of CVE-2023-3732?

  CVE-2023-3732 is classified as a high severity vulnerability due to its potential for exploitation.

• How do I fix CVE-2023-3732?

  To fix CVE-2023-3732, update Microsoft Edge or Google Chrome to the latest version provided by the vendors.

• Which versions of Microsoft Edge are affected by CVE-2023-3732?

  Microsoft Edge versions up to but not including 115.0.1901.183 are affected by CVE-2023-3732.

• Which versions of Google Chrome are affected by CVE-2023-3732?

  Google Chrome versions up to but not including 115.0.5790.98 are affected by CVE-2023-3732.

• Who is responsible for addressing CVE-2023-3732?

  CVE-2023-3732 is addressed by the Chromium development team, impacting both Microsoft Edge and Google Chrome.