Lucene search

K
osvGoogleOSV:OPENSUSE-SU-2024:0302-1
HistorySep 16, 2024 - 8:29 a.m.

Security update for chromium

2024-09-1608:29:07
Google
osv.dev
chromium
update
heap buffer overflow
use after free
type confusion
media router

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High

This update for chromium fixes the following issues:

Chromium 128.0.6613.137 (released 2024-09-10) (boo#1230391)

  • CVE-2024-8636: Heap buffer overflow in Skia
  • CVE-2024-8637: Use after free in Media Router
  • CVE-2024-8638: Type Confusion in V8
  • CVE-2024-8639: Use after free in Autofill

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.7

Confidence

High