CVE-2024-7970

2024-09-0322:40:26

Chrome

github.com

google chrome

heap corruption

crafted html page

remote attacker

cve-2024-7970

chromium security severity high

AI Score

6.2

Confidence

High

SSVC

Exploitation

none

Automatable

Technical Impact

total

JSON

Out of bounds write in V8 in Google Chrome prior to 128.0.6613.119 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*"
    ],
    "vendor": "google",
    "product": "chrome",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "128.0.6613.119",
        "versionType": "custom"
      }
    ],
    "defaultStatus": "unknown"
  }
]