Google Chrome Mojo Heap Corruption Vulnerability

Google Chrome Mojo Heap Corruption Vulnerability

According to the vulnerability report released on 02n of July; out of bounds memory access in Mojo in Google Chrome prior to 114.0.5735.90 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Chromium security severity is classified as ‘’high’’ for this vulnerability. (CVE-2023-2934)

Affected Systems

Configuration 1
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*Up to (excluding) 114.0.5735.198

IoC’s

-

Recommended Solution(s)

Upgrade to higher versions suggested.

Mitigations

-

CVE / CWE

CVE-2023-2934

Related Website(s)

• https://nvd.nist.gov/vuln/detail/CVE-2023-2934
• http://packetstormsecurity.com/files/173259/Chrome-Mojo-Message-Validation-Bypass.html
• https://chromereleases.googleblog.com/2023/05/stable-channel-update-for-desktop_30.html
• https://crbug.com/1429720
• https://www.debian.org/security/2023/dsa-5418

* Vulnerabilities with a CVSS 3.1 score between 7.0 and 8.9 are evaluated to be “high” whereas vulnerabilities with a CVSS 3.1 score between 9.0 and 10.0 are evaluated to be “critical”.