CVE-2024-3157

2024-04-1019:15:49

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-3157

security severity high

gpu process compromised

sandbox escape

ui gestures

unix

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

JSON

Out of bounds memory access in Compositing in Google Chrome prior to 123.0.6312.122 allowed a remote attacker who had compromised the GPU process to potentially perform a sandbox escape via specific UI gestures. (Chromium security severity: High)

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchqt5-qtwebengine< 5.15.16-r8UNKNOWN
Alpineedge-communitynoarchqt6-qtwebengine< 6.6.3-r2UNKNOWN
Alpine3.19-communitynoarchqt5-qtwebengine< 5.15.16-r6UNKNOWN
Alpine3.19-communitynoarchqt6-qtwebengine< 6.6.1-r10UNKNOWN
Alpine3.20-communitynoarchqt5-qtwebengine< 5.15.16-r8UNKNOWN
Alpine3.20-communitynoarchqt6-qtwebengine< 6.6.3-r2UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	qt5-qtwebengine	< 5.15.16-r8	UNKNOWN
Alpine	edge-community	noarch	qt6-qtwebengine	< 6.6.3-r2	UNKNOWN
Alpine	3.19-community	noarch	qt5-qtwebengine	< 5.15.16-r6	UNKNOWN
Alpine	3.19-community	noarch	qt6-qtwebengine	< 6.6.1-r10	UNKNOWN
Alpine	3.20-community	noarch	qt5-qtwebengine	< 5.15.16-r8	UNKNOWN
Alpine	3.20-community	noarch	qt6-qtwebengine	< 6.6.3-r2	UNKNOWN