CVE-2024-3839

2024-04-1708:15:10

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-3839

fonts

google chrome

out of bounds read

remote attacker

sensitive information

process memory

crafted html page

chromium

medium severity

unix

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.7%

JSON

Out of bounds read in Fonts in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to obtain potentially sensitive information from process memory via a crafted HTML page. (Chromium security severity: Medium)

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchqt6-qtwebengine< 6.6.3-r3UNKNOWN
Alpine3.19-communitynoarchqt6-qtwebengine< 6.6.1-r11UNKNOWN
Alpine3.20-communitynoarchqt6-qtwebengine< 6.6.3-r3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	qt6-qtwebengine	< 6.6.3-r3	UNKNOWN
Alpine	3.19-community	noarch	qt6-qtwebengine	< 6.6.1-r11	UNKNOWN
Alpine	3.20-community	noarch	qt6-qtwebengine	< 6.6.3-r3	UNKNOWN