Threat intelligence report · CISA KEV

CVE-2023-7024: Google Chromium WebRTC Heap Buffer Overflow Vulnerability

Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome. Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

· high severity · unattributed attribution

Evidence and provenance

Original source
CISA KEV report ↗
Published
2024-01-02T00:00:00Z
Confidence basis
No actor match
Record ID
376f6dd5ab0997d8b989

Vulnerabilities

CVE-2023-7024

Use and citation

Verify the original report before making operational decisions. Cite this permanent page together with the original source, publication date, confidence level, and review status.