Lucene search

K
ubuntucveUbuntu.comUB:CVE-2024-3157
HistoryApr 10, 2024 - 12:00 a.m.

CVE-2024-3157

2024-04-1000:00:00
ubuntu.com
ubuntu.com
12
cve-2024-3157
out of bounds memory access
compositing
google chrome
remote attacker
gpu process
sandbox escape
ui gestures
chromium
high severity
ubuntu 19.10
chromium snap
debian
unix

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%

Out of bounds memory access in Compositing in Google Chrome prior to
123.0.6312.122 allowed a remote attacker who had compromised the GPU
process to potentially perform a sandbox escape via specific UI gestures.
(Chromium security severity: High)

Notes

Author Note
alexmurray The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap

7.1 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.6%