Google Chrome Skia Graphics Library Integer Overflow Vulnerability (CVE-2023-6345) Technical Advisory

1. Vulnerability Overview & Root Cause

This vulnerability (CVE-2023-6345) is an integer overflow (CWE-190) in Skia, an open-source 2D graphics library utilized extensively within Google Chrome and the Chromium rendering engine. The root cause lies in insufficient bounds checking and validation during the calculation of memory allocation sizes for rendering complex graphical elements, fonts, or vector images. This arithmetic overflow leads to heap-based memory corruption or out-of-bounds write conditions.

2. Exploitation Mechanics & Attack Scenario

An attacker must first compromise the renderer process (for instance, via a separate renderer-level vulnerability) or trick a user into rendering a specially crafted malicious file (such as an image or PDF document). When the Skia library processes the malformed graphical data, the integer overflow is triggered. This allows the attacker to corrupt memory structures, bypass the Chromium sandbox boundaries (Sandbox Escape), and execute arbitrary code with the privileges of the host operating system.

3. Infrastructure & Business Impact

As a zero-day vulnerability actively exploited in the wild (listed in CISA's Known Exploited Vulnerabilities catalog), this flaw poses a severe threat to enterprise environments. Successful exploitation bypasses the browser's primary security boundary, allowing attackers to gain a foothold on employee endpoints, leading to potential lateral movement, credential theft, and full system compromise.