PT-2021-3735 · Google+3 · Google Chrome+4

Sehwa + 1 · Published 2021-07-15 · Updated 2024-06-15 · CVE-2021-30559

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 91.0.4472.164

Description The issue is related to an out of bounds write in the ANGLE library of Google Chrome, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to a denial of service.

Recommendations For Google Chrome versions prior to 91.0.4472.164, update to version 91.0.4472.164 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious HTML pages until the update is applied.

Exploit

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

ALT-PU-2021-2265

ALT-PU-2021-2290

ALT-PU-2021-2409

ALT-PU-2021-2411

ALT-PU-2021-2574

ALT-PU-2021-2627

BDU:2021-03980

CVE-2021-30559

OPENSUSE-SU-2021:1073-1

OPENSUSE-SU-2021:1074-1

OPENSUSE-SU-2021_1073-1

OPENSUSE-SU-2024:10681-1

OPENSUSE-SU-2024:10977-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Angle

Astra Linux

Google Chrome

Suse

References · 2344

• 🔥 https://github.com/s4e-lab/CVE-2021-30573-PoC-Google-Chrome · Exploit
• 🔥 https://github.com/s4e-io/CVE-2021-30573-PoC-Google-Chrome · Exploit
• 🔥 https://github.com/s4eio/CVE-2021-30573-PoC-Google-Chrome · Exploit
• 🔥 https://github.com/thomsdev/CVE-2021-30573 · Exploit
• 🔥 https://github.com/oxctdev/CVE-2021-30573 · Exploit
• 🔥 https://github.com/byteofjoshua/CVE-2021-30573 · Exploit
• 🔥 https://github.com/onsecuredev/CVE-2021-30573 · Exploit
• 🔥 https://github.com/byteofandri/CVE-2021-30573 · Exploit
• 🔥 https://github.com/rakhanobe/CVE-2021-30573 · Exploit
• 🔥 https://github.com/orangmuda/CVE-2021-30573 · Exploit
• https://crbug.com/1219082 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2021-30559 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2021:1074-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory
• https://msrc.microsoft.com/update-guide/en-US/vulnerability/CVE-2021-30559 · Vendor Advisory