Описание
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
There's a flaw in the Angle package where processing maliciously crafted web content may lead to a use-after-free. A remote attacker may leverage that to exploit heap corruption related bugs, such as crashing the application or remote code execution.
Затронутые пакеты
| Платформа | Пакет | Состояние | Рекомендация | Релиз |
|---|---|---|---|---|
| Red Hat Enterprise Linux 7 | webkitgtk3 | Out of support scope | ||
| Red Hat Enterprise Linux 7 Extended Lifecycle Support | webkitgtk4 | Fixed | RHSA-2025:10364 | 07.07.2025 |
| Red Hat Enterprise Linux 8 | webkit2gtk3 | Fixed | RHSA-2024:9636 | 14.11.2024 |
| Red Hat Enterprise Linux 8.2 Advanced Update Support | webkit2gtk3 | Fixed | RHSA-2024:9680 | 14.11.2024 |
| Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support | webkit2gtk3 | Fixed | RHSA-2024:9679 | 14.11.2024 |
| Red Hat Enterprise Linux 8.4 Telecommunications Update Service | webkit2gtk3 | Fixed | RHSA-2024:9679 | 14.11.2024 |
| Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions | webkit2gtk3 | Fixed | RHSA-2024:9679 | 14.11.2024 |
| Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support | webkit2gtk3 | Fixed | RHSA-2024:9653 | 14.11.2024 |
| Red Hat Enterprise Linux 8.6 Telecommunications Update Service | webkit2gtk3 | Fixed | RHSA-2024:9653 | 14.11.2024 |
| Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions | webkit2gtk3 | Fixed | RHSA-2024:9653 | 14.11.2024 |
Показывать по
Дополнительная информация
Статус:
EPSS
7 High
CVSS3
Связанные уязвимости
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allow ...
Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
EPSS
7 High
CVSS3