ZeroDay Findings
Sign inSign up

Findings

CVE-2023-7024

Google Chromium WebRTC Heap Buffer Overflow Vulnerability

Published Dec 21, 2023 · updated Jun 16, 2026 · google chrome

Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.

Timeline

Detection, updates, and resolution for this record.

  1. Dec 21, 2023 · Catalog

    Detected

    Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.

  2. Jan 2, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Jan 23, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 16, 2026 · Catalog

    Updated

    Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Jan 23, 2024

Affected

  • cpe debian/debian linux11.0
  • cpe debian/debian linux12.0
  • cpe fedoraproject/fedora38
  • cpe fedoraproject/fedora39
  • cpe google/chromeversion unspecified
  • vendor Google Chromium WebRTCversion unspecified

Sources

  • CISA KEVCVE-2023-7024

    Google Chromium WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could impact web browsers using WebRTC, including but not limited to Google Chrome.

    cisa.gov
  • CVE.orgCVE-2023-7024

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2023-7024

    30-day exploitation probability 6.7%

    first.org
  • NIST NVDCVE-2023-7024

    Heap buffer overflow in WebRTC in Google Chrome prior to 120.0.6099.129 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

    nvd.nist.gov

References