Use after free in Dawn in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
References
Configurations
History
19 Dec 2024, 20:38
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.5 |
| References | () https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_15.html - Release Notes | |
| References | () https://issues.chromium.org/issues/333414294 - Exploit, Issue Tracking | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/NTSN22LNYXMWHVTYNOYQVOY7VDZFHENQ/ - Mailing List | |
| References | () https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/WSUWM73ZCXTN62AT2REYQDD5ZKPFMDZD/ - Mailing List | |
| First Time |
Google chrome
Fedoraproject fedora Fedoraproject |
|
| CPE | cpe:2.3:o:fedoraproject:fedora:38:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:* cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:* |
Information
Published : 2024-05-15 21:15
Updated : 2024-12-19 20:38
NVD link : CVE-2024-4948
Mitre link : CVE-2024-4948
CVE.ORG link : CVE-2024-4948
JSON object : View
Products Affected
fedoraproject
- fedora
- chrome
CWE
CWE-416
Use After Free