Unlike three of the last four Chrome Zero Day vulnerabilities, CVE-2023-2136 does not target the browser’s V8 Javascript engine. Instead, Google states it is as an “Integer overflow in Skia ...

However, what we do know is that Synacktiv used a single integer overflow flaw to exploit a Tesla ECU with Vehicle (VEH) CAN BUS Control. This is the second car they’ve won in Pwn2Own competitions.