H
eap buffer overflow in PDF in Google Chrome prior to 118.0.5993.70 allowed a remote attacker who convinced a user to engage in specific user interactions to potentially exploit heap corruption via a crafted PDF file. (Chromium security severity: Medium)
References
| Link | Resource |
|---|---|
| https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html | Release Notes Vendor Advisory |
| https://crbug.com/1483194 | Permissions Required |
| https://security.gentoo.org/glsa/202311-11 | Third Party Advisory |
| https://security.gentoo.org/glsa/202312-07 | Third Party Advisory |
| https://security.gentoo.org/glsa/202401-34 | |
| https://www.debian.org/security/2023/dsa-5526 | Third Party Advisory |
| https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html | Release Notes Vendor Advisory |
| https://crbug.com/1483194 | Permissions Required |
| https://security.gentoo.org/glsa/202311-11 | Third Party Advisory |
| https://security.gentoo.org/glsa/202312-07 | Third Party Advisory |
| https://security.gentoo.org/glsa/202401-34 | |
| https://www.debian.org/security/2023/dsa-5526 | Third Party Advisory |
Configurations
History
21 Nov 2024, 08:41
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://chromereleases.googleblog.com/2023/10/stable-channel-update-for-desktop_10.html - Release Notes, Vendor Advisory | |
| References | () https://crbug.com/1483194 - Permissions Required | |
| References | () https://security.gentoo.org/glsa/202311-11 - Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/202312-07 - Third Party Advisory | |
| References | () https://security.gentoo.org/glsa/202401-34 - | |
| References | () https://www.debian.org/security/2023/dsa-5526 - Third Party Advisory |
Information
Published : 2023-10-11 23:15
Updated : 2025-05-01 18:15
NVD link : CVE-2023-5474
Mitre link : CVE-2023-5474
CVE.ORG link : CVE-2023-5474
JSON object : View
Products Affected
CWE
CWE-787
Out-of-bounds Write