CVE-2023-4427

HIGH

Google Chrome < 116.0.5845.110 - Out-of-Bounds Read

Title source: rule

Description

Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.110 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: High)

Exploits (1)

nomisec WRITEUP 27 stars

by tianstcht · poc

https://github.com/tianstcht/CVE-2023-4427

View Code ZIP pw:eip

References (8)

[Third Party Advisory, VDB Entry] http://packetstormsecurity.com/files/174951/Chrome-ReduceJSLoadPropertyWithEnumeratedKey-Out-Of-Bounds-Access.html

[Release Notes, Vendor Advisory] https://chromereleases.googleblog.com/2023/08/chrome-desktop-stable-update.html

[Permissions Required] https://crbug.com/1470668

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/27NR3KG553CG6LGPMP6SHWEVHTYPL6RC/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/6T655QF7CQ3DYAMPFV7IECQYGDEUIVVT/

[Mailing List, Third Party Advisory] https://lists.fedoraproject.org/archives/list/[email protected]/message/KUQ7CTX3W372X3UY56VVNAHCH6H2F4X3/

[Third Party Advisory] https://www.debian.org/security/2023/dsa-5483

[Third Party Advisory] https://security.gentoo.org/glsa/202401-34

Scores

CVSS v3 8.1

EPSS 0.7934

EPSS Percentile 99.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:H

Details

CWE

CWE-125

Status published

Products (4)

fedoraproject/fedora 37

fedoraproject/fedora 38

fedoraproject/fedora 39

google/chrome < 116.0.5845.110

Published Aug 23, 2023

Tracked Since Feb 18, 2026