CVE-2024-1670

2024-02-2104:15:08

Alpine Linux Development Team

security.alpinelinux.org

google chrome

mojo

use after free

vulnerability

cve-2024-1670

heap corruption

crafted html page

remote attacker

chromium

security severity

high

unix

6 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchqt6-qtwebengine< 6.6.2-r1UNKNOWN
Alpine3.19-communitynoarchqt6-qtwebengine< 6.6.1-r8UNKNOWN
Alpine3.20-communitynoarchqt6-qtwebengine< 6.6.2-r1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	qt6-qtwebengine	< 6.6.2-r1	UNKNOWN
Alpine	3.19-community	noarch	qt6-qtwebengine	< 6.6.1-r8	UNKNOWN
Alpine	3.20-community	noarch	qt6-qtwebengine	< 6.6.2-r1	UNKNOWN