Wind River Support Network

HomeDefectsLIN1021-6128

Fixed

LIN1021-6128 : Security Advisory - chromium-x11 - CVE-2023-3729

Created: Jul 23, 2023 Updated: Dec 26, 2023

Resolved Date: Dec 26, 2023

Found In Version: 10.21.20.1

Severity: Standard

Applicable for: Wind River Linux LTS 21

Component/s: Userspace

Description

Use after free in Splitscreen in Google Chrome on ChromeOS prior to 115.0.5790.98 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions. (Chromium security severity: High)

https://nvd.nist.gov/vuln/detail/CVE-2023-3729