PT-2024-3572 · Google+4 · Google Chrome+4

Wgslfuzz · Published 2024-04-16 · Updated 2025-03-13 · CVE-2024-4368

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 124.0.6367.118

Description The issue is related to a use after free in the Dawn component, which can lead to heap corruption. A remote attacker can potentially exploit this via a crafted HTML page, allowing for the execution of arbitrary code. The severity of this issue is considered high.

Recommendations For versions prior to 124.0.6367.118, update to version 124.0.6367.118 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted HTML pages that could trigger the exploitation of the heap corruption.

Exploit

Fix

Use After Free

Buffer Overflow

Weakness Enumeration

CWE-416

CWE-119

Related Identifiers

ALT-PU-2024-10294

ALT-PU-2024-10425

ALT-PU-2024-10427

ALT-PU-2024-11865

ALT-PU-2024-14286

ALT-PU-2024-14830

ALT-PU-2024-15041

ALT-PU-2024-15575

ALT-PU-2024-7311

BDU:2024-03877

CVE-2024-4368

DSA-5676-1

MGASA-2024-0161

OPENSUSE-SU-2024:13953-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 97

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/bi-zone/CVE-2024-7965 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit