CVE-2023-7024

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 120.0.6099.129

Description A heap buffer overflow in WebRTC allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. The vulnerability is actively exploited and may cause crashes or code execution. The issue is due to a heap buffer overflow weakness in the open-source WebRTC framework.

Recommendations For Google Chrome versions prior to 120.0.6099.129, update to version 120.0.6099.129 or later to fix the heap buffer overflow vulnerability in WebRTC. As a temporary workaround, consider disabling WebRTC until a patch is available. Restrict access to WebRTC to minimize the risk of exploitation. Avoid using vulnerable WebRTC functions until the issue is resolved.