CVE-2024-3157

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 123.0.6312.122

Description The issue is related to out of bounds memory access in Compositing, allowing a remote attacker who has compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. This could enable the attacker to execute arbitrary code using a specially crafted web page.

Recommendations For Google Chrome versions prior to 123.0.6312.122, update to version 123.0.6312.122 or later to resolve the issue. As a temporary workaround, consider restricting access to the Compositing component until a patch is applied. Avoid using specific UI gestures that could trigger the vulnerable code.