CVE Vulnerabilities

CVE-2024-4558

Use After Free

Published: May 07, 2024 | Modified: Dec 20, 2024
CVSS 3.x
9.6
CRITICAL
Source:
NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
CVSS 2.x
RedHat/V2
RedHat/V3
7 IMPORTANT
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Ubuntu
MEDIUM

Use after free in ANGLE in Google Chrome prior to 124.0.6367.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Weakness

The product reuses or references memory after it has been freed. At some point afterward, the memory may be allocated again and saved in another pointer, while the original pointer references a location somewhere within the new allocation. Any operations using the original pointer are no longer valid because the memory “belongs” to the code that operates on the new pointer.

Affected Software

Name Vendor Start Version End Version
Chrome Google * 124.0.6367.155 (excluding)
Red Hat Enterprise Linux 7 Extended Lifecycle Support RedHat webkitgtk4-0:2.48.3-2.el7_9 *
Red Hat Enterprise Linux 8 RedHat webkit2gtk3-0:2.46.3-1.el8_10 *
Red Hat Enterprise Linux 8.2 Advanced Update Support RedHat webkit2gtk3-0:2.46.3-1.el8_2 *
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support RedHat webkit2gtk3-0:2.46.3-1.el8_4 *
Red Hat Enterprise Linux 8.4 Telecommunications Update Service RedHat webkit2gtk3-0:2.46.3-1.el8_4 *
Red Hat Enterprise Linux 8.4 Update Services for SAP Solutions RedHat webkit2gtk3-0:2.46.3-1.el8_4 *
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support RedHat webkit2gtk3-0:2.46.3-1.el8_6 *
Red Hat Enterprise Linux 8.6 Telecommunications Update Service RedHat webkit2gtk3-0:2.46.3-1.el8_6 *
Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions RedHat webkit2gtk3-0:2.46.3-1.el8_6 *
Red Hat Enterprise Linux 8.8 Extended Update Support RedHat webkit2gtk3-0:2.46.3-1.el8_8 *
Red Hat Enterprise Linux 9 RedHat webkit2gtk3-0:2.46.1-2.el9_4 *
Red Hat Enterprise Linux 9 RedHat webkit2gtk3-0:2.44.3-2.el9 *
Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions RedHat webkit2gtk3-0:2.46.1-1.el9_0 *
Red Hat Enterprise Linux 9.2 Extended Update Support RedHat webkit2gtk3-0:2.46.1-1.el9_2 *
Chromium-browser Ubuntu upstream *
Qtwebkit-opensource-src Ubuntu devel *
Qtwebkit-opensource-src Ubuntu esm-apps/bionic *
Qtwebkit-opensource-src Ubuntu esm-apps/focal *
Qtwebkit-opensource-src Ubuntu esm-apps/jammy *
Qtwebkit-opensource-src Ubuntu esm-apps/noble *
Qtwebkit-opensource-src Ubuntu esm-infra/xenial *
Qtwebkit-opensource-src Ubuntu focal *
Qtwebkit-opensource-src Ubuntu jammy *
Qtwebkit-opensource-src Ubuntu noble *
Qtwebkit-source Ubuntu esm-apps/bionic *
Qtwebkit-source Ubuntu esm-apps/xenial *
Webkit2gtk Ubuntu devel *
Webkit2gtk Ubuntu esm-infra/bionic *
Webkit2gtk Ubuntu esm-infra/focal *
Webkit2gtk Ubuntu esm-infra/xenial *
Webkit2gtk Ubuntu focal *
Webkit2gtk Ubuntu jammy *
Webkit2gtk Ubuntu noble *
Webkitgtk Ubuntu esm-apps/bionic *
Webkitgtk Ubuntu esm-apps/xenial *
Wpewebkit Ubuntu esm-apps/focal *
Wpewebkit Ubuntu esm-apps/jammy *
Wpewebkit Ubuntu focal *
Wpewebkit Ubuntu jammy *

Potential Mitigations

References