CVE-2024-2176

2024-03-0619:15:09

Google

osv.dev

google chrome

fedcm

use after free

cve-2024-2176

heap corruption

html page

remote attacker

security severity high

software

6.2 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

Use after free in FedCM in Google Chrome prior to 122.0.6261.111 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

CPENameOperatorVersion
chromiumeq114.0.5735.133-1
chromiumeq119.0.6045.159-1~deb12u1
chromiumeq124.0.6367.118-1
chromiumeq106.0.5249.91-1~deb11u1
chromiumeq112.0.5615.49-1
chromiumeq100.0.4896.60-1~deb11u1
chromiumeq106.0.5249.91-1
chromiumeq116.0.5845.180-1~deb12u1
chromiumeq90.0.4430.212-1
chromiumeq120.0.6099.224-1~deb12u1

Name	Operator	Version
chromium	eq	114.0.5735.133-1
chromium	eq	119.0.6045.159-1~deb12u1
chromium	eq	124.0.6367.118-1
chromium	eq	106.0.5249.91-1~deb11u1
chromium	eq	112.0.5615.49-1
chromium	eq	100.0.4896.60-1~deb11u1
chromium	eq	106.0.5249.91-1
chromium	eq	116.0.5845.180-1~deb12u1
chromium	eq	90.0.4430.212-1
chromium	eq	120.0.6099.224-1~deb12u1