PT-2024-5222 · Google+4 · Google Chrome+4

Ttt

·

Published

2024-02-20

·

Updated

2024-11-29

·

CVE-2024-3171

CVSS v2.0

10

High

VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 122.0.6261.57
Description: The issue is related to a use after free vulnerability in the Accessibility component of Google Chrome. This vulnerability can be exploited by a remote attacker who convinces a user to perform specific UI gestures, potentially leading to heap corruption. The attacker must convince the user to engage in specific UI gestures to exploit the vulnerability.
Recommendations: For versions prior to 122.0.6261.57, update to version 122.0.6261.57 or later to resolve the issue. As a temporary workaround, consider restricting access to the Accessibility component until a patch is applied. Avoid using specific UI gestures that may trigger the vulnerability until the issue is resolved.

Exploit

Fix

Use After Free

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-416

Related Identifiers

ALT-PU-2024-10294
ALT-PU-2024-14286
ALT-PU-2024-14830
BDU:2024-05786
CVE-2024-3171
DSA-5629-1

Affected Products

Alt Linux
Astra Linux
Debian
Google Chrome
Red Os