PT-2024-6073 · Google+4 · V8+5
Kipreyyy
·
Published
2024-01-15
·
Updated
2024-11-29
·
CVE-2024-2884
CVSS v2.0
7.8
High
| Vector | AV:N/AC:L/Au:N/C:C/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Google Chrome versions prior to 121.0.6167.139
Description
The issue is related to an out of bounds read in the V8 component of Google Chrome, allowing a remote attacker to potentially access confidential data by using a specially crafted HTML page. This can lead to out of bounds memory access. The vulnerability can be exploited to forge malformed objects on the V8 heap and then leak them to user space, potentially achieving a complete exploit.
Recommendations
For versions prior to 121.0.6167.139, update to version 121.0.6167.139 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied. Avoid using the
V8 component with untrusted input until the issue is resolved.Exploit
Fix
Out of bounds Read
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Google Chrome
Red Os
V8