CVE-2024-0224

2024-01-0402:15:29

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-0224

heap corruption

remote attacker

crafted html page

chromium

security severity: high

unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

43.6%

JSON

Use after free in WebAudio in Google Chrome prior to 120.0.6099.199 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchqt5-qtwebengine< 5.15.16-r5UNKNOWN
Alpineedge-communitynoarchqt6-qtwebengine< 6.6.1-r4UNKNOWN
Alpine3.19-communitynoarchqt5-qtwebengine< 5.15.16-r3UNKNOWN
Alpine3.19-communitynoarchqt6-qtwebengine< 6.6.1-r4UNKNOWN
Alpine3.20-communitynoarchqt5-qtwebengine< 5.15.16-r5UNKNOWN
Alpine3.20-communitynoarchqt6-qtwebengine< 6.6.1-r4UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	qt5-qtwebengine	< 5.15.16-r5	UNKNOWN
Alpine	edge-community	noarch	qt6-qtwebengine	< 6.6.1-r4	UNKNOWN
Alpine	3.19-community	noarch	qt5-qtwebengine	< 5.15.16-r3	UNKNOWN
Alpine	3.19-community	noarch	qt6-qtwebengine	< 6.6.1-r4	UNKNOWN
Alpine	3.20-community	noarch	qt5-qtwebengine	< 5.15.16-r5	UNKNOWN
Alpine	3.20-community	noarch	qt6-qtwebengine	< 6.6.1-r4	UNKNOWN