REDHAT-BUG-2238431: Buffer Overflow
Heap buffer overflow in WebP in Google Chrome prior to 116.0.5845.187 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: Critical)
References: https://crbug.com/1479274 https://chromereleases.googleblog.com/2023/09/stable-channel-update-for-desktop11.html
Affected Software
Event History
Frequently Asked Questions
What is the severity of REDHAT-BUG-2238431?
The severity of REDHAT-BUG-2238431 is classified as Critical due to the potential for remote code execution.
How do I fix REDHAT-BUG-2238431?
To fix REDHAT-BUG-2238431, update Google Chrome to version 116.0.5845.187 or later.
What type of vulnerability is REDHAT-BUG-2238431?
REDHAT-BUG-2238431 is a heap buffer overflow vulnerability in the WebP component of Google Chrome.
What can an attacker do with REDHAT-BUG-2238431?
An attacker can perform an out of bounds memory write, which may lead to arbitrary code execution on the victim's system.
Which versions of Google Chrome are affected by REDHAT-BUG-2238431?
Google Chrome versions prior to 116.0.5845.187 are affected by REDHAT-BUG-2238431.