CVE-2024-0223: Heap buffer overflow in ANGLE

Reference Links

• https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html (Advisory)
• https://crbug.com/1505009
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0223 (Advisory)
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 1231943095317551449

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-0222
• CVE-2024-0224
• CVE-2024-0225

Frequently Asked Questions

• What is the severity of CVE-2024-0223?

  CVE-2024-0223 is categorized as a high severity vulnerability due to the potential for heap buffer overflow.

• Which versions are affected by CVE-2024-0223?

  CVE-2024-0223 affects Google Chrome versions prior to 120.0.6099.199 and Microsoft Edge versions prior to 120.0.2210.121.

• How do I fix CVE-2024-0223?

  To fix CVE-2024-0223, update Google Chrome to version 120.0.6099.199 or Microsoft Edge to version 120.0.2210.121 or later.

• What type of vulnerability is CVE-2024-0223?

  CVE-2024-0223 is a heap buffer overflow vulnerability that can lead to memory corruption.

• Who is responsible for addressing CVE-2024-0223?

  CVE-2024-0223 was assigned by the Chrome project, with Microsoft Edge addressing it through Chromium updates.