Lucene search

K

FreeBSDC5415838-2F52-11EF-9CAB-4CCC6ADDA413

HistoryMay 31, 2024 - 12:00 a.m.

qt6-webengine -- Multiple vulnerabilities

2024-05-3100:00:00

vuxml.freebsd.org

1

qt6-webengine

multiple vulnerabilities

chromium

backports

security bugs

use after free

type confusion

heap buffer overflow

out of bounds write

dawn

v8

webrtc

media session

streams api

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.7%

Qt qtwebengine-chromium repo reports:

Backports for 7 security bugs in Chromium:

CVE-2024-4948: Use after free in Dawn
CVE-2024-5274: Type Confusion in V8
CVE-2024-5493: Heap buffer overflow in WebRTC
CVE-2024-5494: Use after free in Dawn
CVE-2024-5495: Use after free in Dawn
CVE-2024-5496: Use after free in Media Session
CVE-2024-5499: Out of bounds write in Streams API

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchqt6-webengine< 6.7.2UNKNOWN

References

code.qt.io/cgit/qt/qtwebengine-chromium.git/log/?h=118-based

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.6 High

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

69.7%

Related for C5415838-2F52-11EF-9CAB-4CCC6ADDA413