← back
CVE-2023-6704

CVE-2023-6704

EPSS 0.7%
Use after free in libavif in Google Chrome prior to 120.0.6099.109 allowed a remote attacker to potentially exploit heap corruption via a crafted image file. (Chromium security severity: High)
Affected products
Google · Chrome

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
https://chromereleases.googleblog.com/2023/12/stable-channel-update-for-desktop_12.htmlhttps://crbug.com/1504792https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6NWZ23ZJ62XKWVNGHSIZQYILVJWH5BLI/https://security.gentoo.org/glsa/202401-34