PT-2024-2103 · Google+4 · Google Chrome+4

5Fceb6172Bbf7E2C5A948183B53565B9 · Published 2024-02-19 · Updated 2024-12-19 · CVE-2024-2173

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 122.0.6261.111

Description The issue is related to an out of bounds memory access in V8, which can be exploited by a remote attacker using a crafted HTML page, potentially allowing the execution of arbitrary code or causing a denial of service. The estimated number of potentially affected devices worldwide is not specified. There is no information about real-world incidents where this issue was exploited.

Technical details about exploitation include:

• API Endpoints: None specified
• Vulnerable Parameters or Variables: None specified
• Function Names: None specified, but the issue is related to a missing bounds check in the tier-up of the wasm-to-js wrapper.

Recommendations For Google Chrome versions prior to 122.0.6261.111, update to version 122.0.6261.111 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

Exploit

Fix

Memory Corruption

Buffer Overflow

Weakness Enumeration

CWE-787

CWE-119

Related Identifiers

ALT-PU-2024-10294

ALT-PU-2024-14286

ALT-PU-2024-14830

ALT-PU-2024-4439

ALT-PU-2024-7309

BDU:2024-01999

CVE-2024-2173

DSA-5636-1

OPENSUSE-SU-2024:0084-1

OPENSUSE-SU-2024:13764-1

OPENSUSE-SU-2024:13766-1

OPENSUSE-SU-2024:13773-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 87

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit