PT-2022-5324 · Google+3 · Google Chrome+3

Published 2022-09-30 · Updated 2024-10-23 · CVE-2022-3450

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 106.0.5249.119

Description The issue is related to a use after free in Peer Connection, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This may enable the attacker to execute arbitrary code. The estimated number of potentially affected devices and details about real-world incidents are not provided.

Recommendations For versions prior to 106.0.5249.119, update to version 106.0.5249.119 or later to resolve the issue. As a temporary workaround, consider restricting access to crafted HTML pages that could exploit the Peer Connection vulnerability until a patch is applied.

Exploit

Fix

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2022-2840

ALT-PU-2022-2905

ALT-PU-2022-2959

ALT-PU-2023-1462

BDU:2022-06629

CVE-2022-3450

DSA-5253-1

MGASA-2022-0376

OPENSUSE-SU-2022:10146-1

OPENSUSE-SU-2022:10151-1

OPENSUSE-SU-2022:10181-1

OPENSUSE-SU-2022:10182-1

OPENSUSE-SU-2022_10181-1

OPENSUSE-SU-2022_10182-1

OPENSUSE-SU-2023:0115-1

OPENSUSE-SU-2023_0115-1

OPENSUSE-SU-2024:12404-1

OPENSUSE-SU-2024:12948-1

Affected Products

Alt Linux

Astra Linux

Google Chrome

Suse

References · 2361

• 🔥 https://github.com/bjrjk/CVE-2022-4262 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2022-4262 · Exploit
• 🔥 https://github.com/momika233/CVE-2022-3656 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/insoxin/CVE-2023-2033 · Exploit
• 🔥❌ https://github.com/xem6/CVE-2022-4262 · Exploit, Deleted
• https://osv.dev/vulnerability/DSA-5253-1 · Vendor Advisory
• https://security.gentoo.org/glsa/202305-10 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-3450 · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-3450 · Vendor Advisory
• https://crbug.com/1369882 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2023-0131SE47MD · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12404-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:12948-1 · Vendor Advisory