CVE-2024-5497

2024-05-3000:00:00

ubuntu.com

google chrome

remote attackers

heap corruption

crafted html page

out of bounds memory access

chromium

security vulnerability

9.4 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.7%

JSON

Out of bounds memory access in Browser UI in Google Chrome prior to
125.0.6422.141 allowed a remote attacker who convinced a user to engage in
specific UI gestures to potentially exploit heap corruption via a crafted
HTML page. (Chromium security severity: High)

Notes

Author	Note
alexmurray	The Debian chromium source package is called chromium-browser in Ubuntu
mdeslaur	starting with Ubuntu 19.10, the chromium-browser package is just a script that installs the Chromium snap