Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:44125
HistoryNov 02, 2023 - 9:55 p.m.

Improper Validation

2023-11-0221:55:43
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
16
chromium
improper validation
usb input
remote attacker
memory access

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

51.2%

chromium is vulnerable to Improper Validation. The vulnerability occurs due to incorrect USB input validation allowing a remote malicious attacker to perform out of bounds memory access.

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.1

Confidence

High

EPSS

0.001

Percentile

51.2%