CVE-2023-4354

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

Heap buffer overflow in Skia in Google Chrome prior to 116.0.5845.96 allowed a remote attacker who had compromised the renderer process to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-787

Affected software

No affected versions have been published.

Timeline

Published
Aug 15, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-435407.8Memory corruption while processing the IOCTL FM HCI WRITE request.CVE-2023-435417.8Memory corruption while invoking the SubmitCommands call on Gfx engine during the graphics render.CVE-2023-435427.8Memory corruption while copying a keyblob`s material when the key material`s size is not accurately checked.CVE-2023-435437.0Memory corruption in Audio during a playback or a recording due to race condition between allocation and deallocation of graph object.CVE-2023-435447.8Memory corruption when IPC callback handle is used after it has been released during register callback by another thread.CVE-2023-435457.8Memory corruption when more scan frequency list or channels are sent from the user space.CVE-2023-435467.8Memory corruption while invoking HGSL IOCTL context create.CVE-2023-435477.8Memory corruption while invoking IOCTLs calls in Automotive Multimedia.CVE-2023-435489.8Memory corruption while parsing qcp clip with invalid chunk data size.CVE-2023-435497.8Memory corruption while processing TPC target power table in FTM TPC.CVE-2023-43558.8Out of bounds memory access in V8 in Google Chrome prior to 116.0.5845.96 allowed a remote attacker to potentially exploit heap corruption vCVE-2023-435507.8Memory corruption while processing a QMI request for allocating memory from a DHMS supported subsystem.
CVE-2023-4354: High severity, CVSS 8.8 | Vulnix