ZDI-CAN-22148: ZDI-23-1583: Google Chromium Vulkan SwiftShader Double Free Remote Code Execution Vulnerability

Published Nov 6, 2023

Updated

This vulnerability allows remote attackers to execute arbitrary code on affected installations of Google Chromium-based browsers. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The ZDI has assigned a CVSS rating of 8.8.

Affected Software

1 affected component

Google Chromium

Event History

Nov 6, 2023

Advisory Published

06:00 AM

Data Sourced

06:00 AM

Description

Frequently Asked Questions

What is the severity of ZDI-CAN-22148?

The severity of ZDI-CAN-22148 is categorized as high due to the potential for arbitrary code execution.

How do I fix ZDI-CAN-22148?

To fix ZDI-CAN-22148, update your Google Chromium-based browser to the latest version that contains the security patch.

Who is affected by ZDI-CAN-22148?

Users of Google Chromium-based browsers are affected by ZDI-CAN-22148.

What type of vulnerability is ZDI-CAN-22148?

ZDI-CAN-22148 is a remote code execution vulnerability.

What exploits are associated with ZDI-CAN-22148?

Exploitation of ZDI-CAN-22148 requires user interaction by visiting a malicious webpage or opening a malicious file.