CVE-2023-2137: Heap buffer overflow in sqlite
Chromium: CVE-2023-2137 Heap buffer overflow in sqlite
Other sources
Heap buffer overflow in sqlite in Google Chrome prior to 112.0.5615.137 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2023-2137?
CVE-2023-2137 is a heap buffer overflow vulnerability in sqlite in Google Chrome and Microsoft Edge.
What is the severity of CVE-2023-2137?
The severity of CVE-2023-2137 is High, with a CVSS score of 8.8.
How does CVE-2023-2137 impact users?
CVE-2023-2137 allows a remote attacker to potentially exploit heap corruption via a crafted HTML page, which could lead to remote code execution or denial of service.
What software is affected by CVE-2023-2137?
Microsoft Edge (Chromium-based), Microsoft Edge (version 112.0.1722.58), Google Chrome (up to version 112.0.5615.137), Debian Linux (version 11.0), Fedora (versions 36, 37, 38), and Chromium (version up to 90.0.4430.212-1~deb10u1) are affected by CVE-2023-2137.
How can I fix CVE-2023-2137?
To fix CVE-2023-2137, users should update their affected software to the latest versions provided by the respective vendors or distributions.