PT-2024-3928 · Google+6 · Google Chrome+6

Zh1X1An1221 · Published 2024-05-07 · Updated 2025-03-19 · CVE-2024-5497

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge (affected versions not specified)

Description: The issue is related to an out of bounds memory access in the Browser UI, specifically in the Keyboard Inputs component, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This could impact the confidentiality, integrity, and availability of protected information. A remote attacker would need to convince a user to engage in specific UI gestures to exploit this issue.

Recommendations: For Google Chrome versions prior to 125.0.6422.141, update to version 125.0.6422.141 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Out of bounds Read

Memory Corruption

Weakness Enumeration

CWE-125

CWE-787

Related Identifiers

ALT-PU-2024-10294

ALT-PU-2024-14830

ALT-PU-2024-14994

ALT-PU-2024-14996

ALT-PU-2024-15041

ALT-PU-2024-15575

ALT-PU-2024-8614

ALT-PU-2025-4366

BDU:2024-04338

CVE-2024-5497

DSA-5701-1

MGASA-2024-0205

OPENSUSE-SU-2024:0155-1

OPENSUSE-SU-2024:0187-1

OPENSUSE-SU-2024:0223-1

OPENSUSE-SU-2024:14013-1

OPENSUSE-SU-2024_0187-1

OPENSUSE-SU-2024_0223-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Edge

Red Os

Suse

References · 92

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/xcanwin/CVE-2023-4357-Chrome-XXE · Exploit
• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2024-5274 · Exploit
• 🔥 https://github.com/kaist-hacking/CVE-2023-6702 · Exploit
• 🔥 https://github.com/mistymntncop/CVE-2023-2033 · Exploit
• 🔥 https://github.com/OgulcanUnveren/CVE-2023-4357-APT-Style-exploitation · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/bi-zone/CVE-2024-7965 · Exploit
• 🔥 https://github.com/tianstcht/CVE-2023-4427 · Exploit
• 🔥 https://github.com/zckevin/CVE-2023-4762 · Exploit
• 🔥 https://github.com/buptsb/CVE-2023-4762 · Exploit
• 🔥 https://github.com/sandumjacob/CVE-2023-2033-Analysis · Exploit
• 🔥 https://github.com/rycbar77/CVE-2024-2887 · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit