CVE-2023-6345
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who...
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Required
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- Record
CVE-2023-6345- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- Record
CVE-2023-6345- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
EUVDEUVD-2023-58586
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- Record
EUVD-2023-58586- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-xm5p-7w7v-qqr5
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who...
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- Record
GHSA-xm5p-7w7v-qqr5- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Weakness
- CWE-190
- Updated
- 2026-11-02
CISA KEV No score
Google Skia Integer Overflow Vulnerability
Google Chromium Skia contains an integer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a malicious file. This vulnerability affects Google Chrome and ChromeOS, Android, Flutter, and possibly other products.
- Record
CVE-2023-6345- Weakness
- CWE-190
- Updated
- 2026-11-02
OSVALPINE-CVE-2023-6345
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- Record
ALPINE-CVE-2023-6345- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-03
Show 9 moreShow less
OSV
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- Record
CVE-2023-6345- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVDEBIAN-CVE-2023-6345
Integer overflow in Skia in Google Chrome prior to 119.0.6045.199 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a malicious file. (Chromium security severity: High)
- Record
DEBIAN-CVE-2023-6345- CVSS 3.1
- 9.6 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H - Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0387-1 No score
Security update for chromium
This update for Chromium fixes the following issue:
Chromium 119.0.6045.199 (boo#1217616)
- CVE-2023-6348: Type Confusion in Spellcheck
- CVE-2023-6347: Use after free in Mojo
- CVE-2023-6346: Use after free in WebAudio
- CVE-2023-6350: Out of bounds memory access in libavif (boo#1217614)
- CVE-2023-6351: Use after free in libavif (boo#1217615)
- CVE-2023-6345: Integer overflow in Skia
- Various fixes from internal audits, fuzzing and other initiatives.
- Record
openSUSE-SU-2023:0387-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0396-1 No score
Security update for opera
This update for opera fixes the following issues:
- Update to 105.0.4970.34
- DNA-112796 [Import] Import bookmarks and history don't work
- DNA-113147 Add strength setting for Lucid Mode
- DNA-113148 Update 'Lucid Mode' button on videos to enable / disable split preview
- DNA-113287 Add strength setting for Lucid Mode in Easy Setup
- DNA-113310 Remove Lucid Mode for Images
- DNA-113360 [Lucid Mode] Shadow around lucid mode button
- DNA-113447 Split preview line should be white
- DNA-113630 Lucid Mode strength should default to highest (in desktop)
- Changes in 105.0.4970.29
- CHR-9416 Updating Chromium on desktop-stable-* branches
- DNA-113292 Extension icons not shown after restart
- The update to chromium 119.0.6045.199 fixes following issues: CVE-2023-6348, CVE-2023-6347, CVE-2023-6346, CVE-2023-6350, CVE-2023-6351, CVE-2023-6345
- Record
openSUSE-SU-2023:0396-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2023:0397-1 No score
Security update for opera
This update for opera fixes the following issues:
- Update to 105.0.4970.34
- DNA-112796 [Import] Import bookmarks and history don't work
- DNA-113147 Add strength setting for Lucid Mode
- DNA-113148 Update 'Lucid Mode' button on videos to enable / disable split preview
- DNA-113287 Add strength setting for Lucid Mode in Easy Setup
- DNA-113310 Remove Lucid Mode for Images
- DNA-113360 [Lucid Mode] Shadow around lucid mode button
- DNA-113447 Split preview line should be white
- DNA-113630 Lucid Mode strength should default to highest (in desktop)
- Changes in 105.0.4970.29
- CHR-9416 Updating Chromium on desktop-stable-* branches
- DNA-113292 Extension icons not shown after restart
- The update to chromium 119.0.6045.199 fixes following issues: CVE-2023-6348, CVE-2023-6347, CVE-2023-6346, CVE-2023-6350, CVE-2023-6351, CVE-2023-6345
- Record
openSUSE-SU-2023:0397-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13473-1 No score
chromedriver-119.0.6045.199-1.1 on GA media
These are all security issues fixed in the chromedriver-119.0.6045.199-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13473-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13481-1 No score
ungoogled-chromium-119.0.6045.199-1.1 on GA media
These are all security issues fixed in the ungoogled-chromium-119.0.6045.199-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13481-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:13483-1 No score
nodejs-electron-27.1.3-1.1 on GA media
These are all security issues fixed in the nodejs-electron-27.1.3-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:13483-1- Updated
- 2026-11-02
OSVopenSUSE-SU-2024:14001-1 No score
libQt5Pdf5-5.15.17-1.1 on GA media
These are all security issues fixed in the libQt5Pdf5-5.15.17-1.1 package on the GA media of openSUSE Tumbleweed.
- Record
openSUSE-SU-2024:14001-1- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
qt5-qtwebengineAlpine:v3.19 |
before 5.15.16-r2 | 5.15.16-r2 |
qt5-qtwebengineAlpine:v3.20 |
before 5.15.16-r3 | 5.15.16-r3 |
qt5-qtwebengineAlpine:v3.21 |
before 5.15.16-r3 | 5.15.16-r3 |
qt5-qtwebengineAlpine:v3.22 |
before 5.15.16-r3 | 5.15.16-r3 |
qt5-qtwebengineAlpine:v3.23 |
before 5.15.16-r3 | 5.15.16-r3 |
qt6-qtwebengineAlpine:v3.19 |
before 6.6.1-r1 | 6.6.1-r1 |
qt6-qtwebengineAlpine:v3.20 |
before 6.6.1-r1 | 6.6.1-r1 |
qt6-qtwebengineAlpine:v3.21 |
before 6.6.1-r1 | 6.6.1-r1 |
qt6-qtwebengineAlpine:v3.22 |
before 6.6.1-r1 | 6.6.1-r1 |
qt6-qtwebengineAlpine:v3.23 |
before 6.6.1-r1 | 6.6.1-r1 |
Show 14 moreShow less
| Package | Affected | Fixed |
|---|---|---|
qt6-qtwebengineAlpine:v3.24 |
before 6.6.1-r1 | 6.6.1-r1 |
chromiumDebian:12 |
before 119.0.6045.199-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 |
119.0.6045.199-1~deb12u1 |
chromiumDebian:13 |
before 119.0.6045.199-1 | 119.0.6045.199-1 |
chromiumDebian:14 |
before 119.0.6045.199-1 | 119.0.6045.199-1 |
chromiumDebian:11 From an advisory covering 6 CVEs |
before 119.0.6045.199-1~deb11u1, plus listed versions 100.0.4896.127-1100.0.4896.127-1~deb11u1100.0.4896.60-1100.0.4896.60-1~deb11u1100.0.4896.75-1 Show 45 moreShow less100.0.4896.75-1~deb11u1100.0.4896.88-1100.0.4896.88-1~deb11u1101.0.4951.41-1101.0.4951.41-1~deb11u1101.0.4951.41-2101.0.4951.54-1101.0.4951.64-1101.0.4951.64-1~deb11u1102.0.5005.115-1102.0.5005.115-1~deb11u1102.0.5005.61-1102.0.5005.61-1~deb11u1103.0.5060.114-1103.0.5060.114-1~deb11u1103.0.5060.134-1103.0.5060.134-1~deb11u1103.0.5060.53-1103.0.5060.53-1~deb11u1104.0.5112.101-1104.0.5112.101-1~deb11u1104.0.5112.79-1104.0.5112.79-1~deb11u1105.0.5195.102-1105.0.5195.102-1~deb11u1105.0.5195.125-1105.0.5195.125-1~deb11u1105.0.5195.52-1105.0.5195.52-1~deb11u1106.0.5249.103-1106.0.5249.103-2106.0.5249.119-1106.0.5249.119-1~deb11u1106.0.5249.61-1106.0.5249.61-1~deb11u1106.0.5249.91-1106.0.5249.91-1~deb11u1107.0.5304.110-1107.0.5304.110-1~deb11u1107.0.5304.110-2107.0.5304.121-1107.0.5304.121-1~deb11u1107.0.5304.68-1107.0.5304.68-1~deb11u1107.0.5304.87-1 |
119.0.6045.199-1~deb11u1 |
chromiumDebian:12 From an advisory covering 6 CVEs |
before 119.0.6045.199-1~deb12u1, plus listed versions 113.0.5672.126-1114.0.5735.106-1114.0.5735.106-1~deb11u1114.0.5735.106-1~deb12u1114.0.5735.133-1 Show 45 moreShow less114.0.5735.133-1~deb11u1114.0.5735.133-1~deb12u1114.0.5735.198-1114.0.5735.198-1~deb11u1114.0.5735.198-1~deb12u1114.0.5735.90-1114.0.5735.90-2114.0.5735.90-2~deb11u1114.0.5735.90-2~deb12u1115.0.5790.102-1115.0.5790.102-2115.0.5790.170-1115.0.5790.170-1~deb11u1115.0.5790.170-1~deb12u1115.0.5790.98-1115.0.5790.98-1~deb11u1115.0.5790.98-1~deb12u1115.0.5790.98-2116.0.5845.110-1116.0.5845.110-1~deb11u1116.0.5845.110-1~deb12u1116.0.5845.110-2116.0.5845.140-1116.0.5845.140-1~deb11u1116.0.5845.140-1~deb12u1116.0.5845.180-1116.0.5845.180-1~deb11u1116.0.5845.180-1~deb12u1116.0.5845.96-1116.0.5845.96-1~deb11u1116.0.5845.96-1~deb12u1116.0.5845.96-2117.0.5938.132-1117.0.5938.132-1~deb11u1117.0.5938.132-1~deb12u1117.0.5938.132-2117.0.5938.149-1117.0.5938.149-1~deb11u1117.0.5938.149-1~deb12u1117.0.5938.62-1117.0.5938.62-1~deb11u1117.0.5938.62-1~deb12u1117.0.5938.92-1118.0.5993.117-1118.0.5993.117-1~deb11u1 |
119.0.6045.199-1~deb12u1 |
chromiumSUSE:Package Hub 15 SP4 From an advisory covering 6 CVEs |
before 119.0.6045.199-bp155.2.61.1 | 119.0.6045.199-bp155.2.61.1 |
chromiumSUSE:Package Hub 15 SP5 From an advisory covering 6 CVEs |
before 119.0.6045.199-bp155.2.61.1 | 119.0.6045.199-bp155.2.61.1 |
chromiumopenSUSE:Leap 15.4 From an advisory covering 6 CVEs |
before 119.0.6045.199-bp155.2.61.1 | 119.0.6045.199-bp155.2.61.1 |
chromiumopenSUSE:Leap 15.5 From an advisory covering 6 CVEs |
before 119.0.6045.199-bp155.2.61.1 | 119.0.6045.199-bp155.2.61.1 |
operaopenSUSE:Leap 15.5 NonFree From an advisory covering 6 CVEs |
before 105.0.4970.34-lp155.3.24.1 | 105.0.4970.34-lp155.3.24.1 |
operaopenSUSE:Leap 15.4 NonFree From an advisory covering 6 CVEs |
before 105.0.4970.34-lp154.2.65.1 | 105.0.4970.34-lp154.2.65.1 |
chromiumopenSUSE:Tumbleweed From an advisory covering 6 CVEs |
before 119.0.6045.199-1.1 | 119.0.6045.199-1.1 |
nodejs-electronopenSUSE:Tumbleweed From an advisory covering 4 CVEs |
before 27.1.3-1.1 | 27.1.3-1.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected | ||
| exploitation | ||
| affected, aliases, references | OSV | |
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2023-6345 is a critical vulnerability (CVSS 9.6) in Google Chrome, published November 29, 2023. CISA lists it as known to be exploited, since November 30, 2023. EUVD reports exploitation since November 30, 2023. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 16.5%, the 97th percentile. Fixed in qt5-qtwebengine 5.15.16-r2.
References
chromereleases.googleblog.com/2023/11/stable-channel-update-for-desktop_28.html
crbug.com/1505053
lists.fedoraproject.org/archives/list/[email protected]/message/UJROPNKWW65R34J4IYGTJ7A3OBPUL4IQ
debian.org/security/2023/dsa-5569
Show 34 moreShow less
security.gentoo.org/glsa/202401-34
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2023-6345
nvd.nist.gov/vuln/detail/CVE-2023-6345
github.com/advisories/GHSA-xm5p-7w7v-qqr5
security.alpinelinux.org/vuln/CVE-2023-6345
security-tracker.debian.org/tracker/CVE-2023-6345
lists.opensuse.org/archives/list/[email protected]/thread/UNQU7JCLG7KXCWPX566ZOCJ7WKAX3OEI
bugzilla.suse.com/1217614
suse.com/security/cve/CVE-2023-6345
Left out here: 144 versions. The JSON record has them.