CVE-2024-3914

2024-04-1718:15:16

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-3914

google chrome

heap corruption

html page

remote attacker

chromium

severity: high

unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

16.0%

JSON

Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchqt5-qtwebengine< 5.15.17-r0UNKNOWN
Alpineedge-communitynoarchqt6-qtwebengine< 6.6.3-r3UNKNOWN
Alpine3.19-communitynoarchqt6-qtwebengine< 6.6.1-r11UNKNOWN
Alpine3.20-communitynoarchqt5-qtwebengine< 5.15.16-r9UNKNOWN
Alpine3.20-communitynoarchqt6-qtwebengine< 6.6.3-r3UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	qt5-qtwebengine	< 5.15.17-r0	UNKNOWN
Alpine	edge-community	noarch	qt6-qtwebengine	< 6.6.3-r3	UNKNOWN
Alpine	3.19-community	noarch	qt6-qtwebengine	< 6.6.1-r11	UNKNOWN
Alpine	3.20-community	noarch	qt5-qtwebengine	< 5.15.16-r9	UNKNOWN
Alpine	3.20-community	noarch	qt6-qtwebengine	< 6.6.3-r3	UNKNOWN