Lucene search

FreeBSDC6F03EA6-12DE-11EF-83D8-4CCC6ADDA413

HistoryApr 03, 2024 - 12:00 a.m.

qt6-webengine -- Multiple vulnerabilities

2024-04-0300:00:00

vuxml.freebsd.org

webengine

vulnerabilities

chromium

backports

security bugs

cve-2024-2625

cve-2024-2626

cve-2024-2885

swiftshader

dawn

webassembly

compositing

angle

quic

fonts

site isolation

type confusion

use after free

out of bounds read

heap buffer overflow

insufficient policy enforcement

picture in picture

visuals

unix

8.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

53.7%

JSON

Qt qtwebengine-chromium repo reports:

Backports for 16 security bugs in Chromium:

CVE-2024-2625: Object lifecycle issue in V8
CVE-2024-2626: Out of bounds read in Swiftshader
CVE-2024-2885: Use after free in Dawn
CVE-2024-2887: Type Confusion in WebAssembly
CVE-2024-3157: Out of bounds write in Compositing
CVE-2024-3159: Out of bounds memory access in V8
CVE-2024-3516: Heap buffer overflow in ANGLE
CVE-2024-3837: Use after free in QUIC
CVE-2024-3839: Out of bounds read in Fonts
CVE-2024-3914: Use after free in V8
CVE-2024-3840: Insufficient policy enforcement in Site Isolation
CVE-2024-4058: Type Confusion in ANGLE
CVE-2024-4060: Use after free in Dawn
CVE-2024-4331: Use after free in Picture In Picture
CVE-2024-4368: Use after free in Dawn
CVE-2024-4671: Use after free in Visuals

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchqt6-webengine< 6.7.0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	qt6-webengine	< 6.7.0	UNKNOWN

References

code.qt.io/cgit/qt/qtwebengine-chromium.git/log/?h=118-based