PT-2024-6164 · Google+4 · Google Chrome+5

Thedog · Published 2024-08-21 · Updated 2025-09-29 · CVE-2024-7965

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 128.0.6613.84

Description The vulnerability is an inappropriate implementation bug in the V8 JavaScript and WebAssembly engine, which could allow a remote attacker to potentially exploit heap corruption via a crafted HTML page. This flaw has been described as a high-severity vulnerability and is being actively exploited in the wild. A proof of concept (PoC) exploit has been made available for this vulnerability. The vulnerability could enable remote attacks, and it is recommended to update Google Chrome to the latest version to protect against this vulnerability.

Recommendations To resolve the issue, update Google Chrome to version 128.0.6613.84 or later. As a temporary workaround, consider disabling the V8 JavaScript engine or restricting access to it until a patch is available. However, the most effective solution is to update the browser to the latest version.

Exploit

Fix

Memory Corruption

Improperly Implemented Security Check for Standard

Weakness Enumeration

CWE-787

CWE-358

Related Identifiers

ALSA-2025_16880

ALSA-2025_2863

ALSA-2025_2864

ALT-PU-2024-14994

ALT-PU-2024-14996

ALT-PU-2024-15041

ALT-PU-2024-15575

ALT-PU-2024-17740

ALT-PU-2025-2945

ALT-PU-2025-4366

ALT-PU-2025-7539

ALT-PU-2025-8547

BDU:2024-07084

CVE-2024-7965

DSA-5757-1

MGASA-2024-0321

OPENSUSE-SU-2024:0258-1

OPENSUSE-SU-2024:0258-2

OPENSUSE-SU-2024:14285-1

OPENSUSE-SU-2024:14425-1

OPENSUSE-SU-2024:14548-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

V8 Javascript Engine

References · 315

• 🔥 https://github.com/bi-zone/CVE-2024-7965 · Exploit
• 🔥 https://github.com/XiaomingX/cve-2024-7965-poc · Exploit
• https://osv.dev/vulnerability/openSUSE-SU-2024:14425-1 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2024-1031SE47 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/711120 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0258-2 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:0258-1 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/711102 · Security Note
• https://chromereleases.googleblog.com/2024/08/stable-channel-update-for-desktop_21.html · Security Note
• https://wiki.astralinux.ru/astra-linux-se17-bulletin-2024-1108SE17MD · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-7965 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07084 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2024:14548-1 · Vendor Advisory