CVE-2024-1670

2024-02-2104:15:08

Alpine Linux Development Team

security.alpinelinux.org

google chrome

mojo

use after free

vulnerability

cve-2024-1670

heap corruption

crafted html page

remote attacker

chromium

security severity

high

unix

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

AI Score

Confidence

High

EPSS

Percentile

15.5%

JSON

Use after free in Mojo in Google Chrome prior to 122.0.6261.57 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchqt6-qtwebengine< 6.6.2-r1UNKNOWN
Alpine3.19-communitynoarchqt6-qtwebengine< 6.6.1-r8UNKNOWN
Alpine3.20-communitynoarchqt6-qtwebengine< 6.6.2-r1UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	qt6-qtwebengine	< 6.6.2-r1	UNKNOWN
Alpine	3.19-community	noarch	qt6-qtwebengine	< 6.6.1-r8	UNKNOWN
Alpine	3.20-community	noarch	qt6-qtwebengine	< 6.6.2-r1	UNKNOWN