CVE-2024-3170

2024-07-1622:14:02

Chrome

github.com

cve-2024-3170

webrtc

google chrome

heap corruption

html page

remote attacker

chromium

security severity

high

AI Score

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Use after free in WebRTC in Google Chrome prior to 121.0.6167.85 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "121.0.6167.85",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]