CVE-2024-4949

2024-05-1521:15:09

Google

osv.dev

google chrome

heap corruption

remote attacker

html page

software

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Use after free in V8 in Google Chrome prior to 125.0.6422.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)

CPENameOperatorVersion
chromiumeq120.0.6099.71-1~deb12u1
chromiumeq81.0.4044.62-1
chromiumeq122.0.6261.94-1
chromiumeq75.0.3770.90-1
chromiumeq89.0.4389.114-1
chromiumeq114.0.5735.198-1~deb12u1
chromiumeq100.0.4896.75-1
chromiumeq118.0.5993.117-1~deb11u1
chromiumeq120.0.6099.129-1
chromiumeq116.0.5845.96-1

Name	Operator	Version
chromium	eq	120.0.6099.71-1~deb12u1
chromium	eq	81.0.4044.62-1
chromium	eq	122.0.6261.94-1
chromium	eq	75.0.3770.90-1
chromium	eq	89.0.4389.114-1
chromium	eq	114.0.5735.198-1~deb12u1
chromium	eq	100.0.4896.75-1
chromium	eq	118.0.5993.117-1~deb11u1
chromium	eq	120.0.6099.129-1
chromium	eq	116.0.5845.96-1