CVE-2023-7024

HIGH KEV

Google Chrome < 120.0.6099.129 - Heap Buffer Overflow in WebRTC

Title source: llm
STIX 2.1

Exploitation Summary

CVE-2023-7024 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added January 2, 2024. EIP tracks 1 public exploit from researchers including aka76bm.

AI-analyzed exploit summary This repository contains detection and update scripts for CVE-2023-7024, a heap buffer overflow in WebRTC. It includes version-checking scripts and automated update tools but no functional exploit code.

Description

Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Exploits (1)

nomisec SCANNER 1 stars
by aka76bm · poc
https://github.com/aka76bm/google-chrome-emergency-update

This repository contains detection and update scripts for CVE-2023-7024, a heap buffer overflow in WebRTC. It includes version-checking scripts and automated update tools but no functional exploit code.

Classification
Scanner 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Google Chrome < 120.0.6099.62
No auth needed
Prerequisites: Google Chrome installed
devstral-2 · analyzed Feb 19, 2026 Full analysis →

References (7)

Core 7

Scores

CVSS v3 8.8
EPSS 0.0736
EPSS Percentile 93.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation active
Automatable no
Technical Impact total

Details

CISA KEV 2024-01-02
VulnCheck KEV 2023-12-19
InTheWild.io 2023-12-19
ENISA EUVD EUVD-2023-59215
CWE
CWE-787
Status published
Products (5)
debian/debian_linux 11.0
debian/debian_linux 12.0
fedoraproject/fedora 38
fedoraproject/fedora 39
google/chrome < 120.0.6099.129
Published Dec 21, 2023
KEV Added Jan 02, 2024
Tracked Since Feb 18, 2026