CVE-2024-4559

MEDIUM

Google Chrome < 124.0.6367.155 - Out-of-Bounds Write

Title source: rule

Description

Heap buffer overflow in WebAudio in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References (5)

Core 5

Core References

Release Notes

https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html

Exploit, Issue Tracking

https://issues.chromium.org/issues/331369797

Mailing List

https://lists.fedoraproject.org/archives/list/[email protected]/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/

Mailing List

https://lists.fedoraproject.org/archives/list/[email protected]/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/

Mailing List

https://lists.fedoraproject.org/archives/list/[email protected]/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/

Scores

CVSS v3 6.5

EPSS 0.0041

EPSS Percentile 61.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact total

Details

CWE

CWE-122 CWE-787

Status published

Products (4)

fedoraproject/fedora 38

fedoraproject/fedora 39

fedoraproject/fedora 40

google/chrome < 124.0.6367.155

Published May 07, 2024

Tracked Since Feb 18, 2026