Veracode Vulnerability DatabaseVERACODE:46218

HistoryApr 04, 2024 - 2:17 p.m.

Use-After-Free

2024-04-0414:17:34

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

chromium

use-after-free

webcodecs

vulnerability

memory handling

remote attacker

html page

arbitrary operations

software

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

15.5%

JSON

chromium is vulnerable to a Use-After-Free. The vulnerability due to improper handling of memory in the WebCodecs component. It allows a remote attacker to execute arbitrary read/write operations via a crafted HTML page.

References

chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_26.html

issues.chromium.org/issues/330575496

lists.fedoraproject.org/archives/list/[email protected]/message/3YUWGSMA5X2NQP5XEFCLRWNX6246GZ2C/

lists.fedoraproject.org/archives/list/[email protected]/message/G3RKI7VTQSIAI3PVZGRCHOSELTQXQ5FQ/

lists.fedoraproject.org/archives/list/[email protected]/message/IQMRHKDEG4J7TMRRRGUGW6GS4MVBX5IT/

security-tracker.debian.org/tracker/CVE-2024-2886

CVSS3

7.5

Attack Vector

NETWORK

Attack Complexity

HIGH

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

7.5

Confidence

High

EPSS

Percentile

15.5%

JSON

Related for VERACODE:46218