PT-2024-3654 · Google+4 · Google Chrome+4

Wgslfuzz

·

Published

2024-05-15

·

Updated

2024-12-19

·

CVE-2024-4948

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 125.0.6422.60
Description The issue is related to a use after free in the Dawn component, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could be achieved through a specially crafted HTTP request. The severity of this issue is considered high.
Recommendations For versions prior to 125.0.6422.60, update to version 125.0.6422.60 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable web pages or disabling the use of WebGPU shaders until the update is applied.

Exploit

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2024-10294
ALT-PU-2024-11865
ALT-PU-2024-14286
ALT-PU-2024-14830
ALT-PU-2024-8361
BDU:2024-03979
CVE-2024-4948
DSA-5694-1
MGASA-2024-0190
OPENSUSE-SU-2024:13982-1

Affected Products

Alt Linux
Astra Linux
Debian
Google Chrome
Red Os