CVE-2023-4072: Out of bounds read and write in WebGL
Chromium: CVE-2023-4072 Out of bounds read and write in WebGL
Other sources
Out of bounds read and write in WebGL in Google Chrome prior to 115.0.5790.170 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-4072?
CVE-2023-4072 is a vulnerability that allows for out of bounds read and write in WebGL in Google Chrome prior to version 115.0.5790.170.
How can a remote attacker exploit CVE-2023-4072?
A remote attacker can potentially exploit CVE-2023-4072 by using a crafted HTML page to cause heap corruption.
What is the severity of CVE-2023-4072?
CVE-2023-4072 has a severity rating of High (8.8).
Which software versions are affected by CVE-2023-4072?
Google Chrome prior to version 115.0.5790.170, Microsoft Edge (Chromium-based), and Microsoft Edge versions up to 115.0.1901.200 are affected by CVE-2023-4072.
How can I fix CVE-2023-4072?
It is recommended to update to Google Chrome version 115.0.5790.170 or later, or apply the necessary updates provided by Microsoft for Edge (Chromium-based) and Microsoft Edge. Debian users can update the chromium package to a version that includes the fix.