vulnerability

FreeBSD: (Multiple Advisories) (CVE-2023-6351)

Try Surface Command

Back to search

Severity

CVSS

(AV:N/AC:M/Au:N/C:C/I:C/A:C)

Published

Dec 7, 2023

Added

Dec 7, 2023

Modified

Jun 15, 2026

Description

Use after free in libavif in Google Chrome prior to 119.0.6045.199 allowed a remote attacker to potentially exploit heap corruption via a crafted avif file. (Chromium security severity: High)

Solutions

freebsd-upgrade-package-electron25freebsd-upgrade-package-chromiumfreebsd-upgrade-package-ungoogled-chromiumfreebsd-upgrade-package-qt5-webenginefreebsd-upgrade-package-qt6-webengine

References

CVE-2023-6351
https://attackerkb.com/topics/CVE-2023-6351
CWE-416
EUVD-EUVD-2023-58592
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-58592

Rapid7 Labs

2026 Global Threat Landscape Report

The predictive window has collapsed. Exploitation follows disclosure in days. See how attackers are accelerating and how to stay ahead.

Get report