PT-2024-3571 · Google+4 · Google Chrome+4

Kipreyyy · Published 2024-04-16 · Updated 2024-12-20 · CVE-2024-4331

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.118

Description The issue is related to a use after free in the Picture In Picture feature, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could lead to arbitrary code execution. The severity of this issue is considered high.

Recommendations For versions prior to 124.0.6367.118, update to version 124.0.6367.118 or later to resolve the issue. As a temporary workaround, consider disabling the Picture In Picture feature until a patch is available.

Exploit

Fix

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

ALT-PU-2024-10294

ALT-PU-2024-10425

ALT-PU-2024-10427

ALT-PU-2024-11865

ALT-PU-2024-14286

ALT-PU-2024-14830

ALT-PU-2024-15041

ALT-PU-2024-15575

ALT-PU-2024-7311

BDU:2024-03876

CVE-2024-4331

DSA-5676-1

MGASA-2024-0161

OPENSUSE-SU-2024:13953-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 96

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/bi-zone/CVE-2024-7965 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit