Bug 1224294 (CVE-2024-4761)

Summary: VUL-0: CVE-2024-4761: chromium,ungoogled-chromium: out of bounds write in V8
Product: [Novell Products] SUSE Security Incidents Reporter: SMASH SMASH <smash_bz>
Component: IncidentsAssignee: Security Team bot <security-team>
Status: RESOLVED FIXED QA Contact: Security Team bot <security-team>
Severity: Normal    
Priority: P3 - Medium CC: Andreas.Stieger, carlos.lopez, gmbr3
Version: unspecified   
Target Milestone: ---   
Hardware: Other   
OS: Other   
URL: https://smash.suse.de/issue/405653/
Whiteboard:
Found By: Security Response Team Services Priority:
Business Priority: Blocker: ---
Marketing QA Status: --- IT Deployment: ---
Bug Depends on: 1224178    
Bug Blocks:    

Description SMASH SMASH 2024-05-15 11:47:16 UTC 
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-4761
https://www.cve.org/CVERecord?id=CVE-2024-4761
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html
https://issues.chromium.org/issues/339458194
Comment 1 Carlos López 2024-05-15 11:47:49 UTC 
This is version 124.0.6367.207
Comment 2 OBSbugzilla Bot 2024-05-15 13:15:04 UTC 
This is an autogenerated message for OBS integration:
This bug (1224294) was mentioned in
https://build.opensuse.org/request/show/1174247 Factory / chromium
Comment 4 OBSbugzilla Bot 2024-05-22 06:55:04 UTC 
This is an autogenerated message for OBS integration:
This bug (1224294) was mentioned in
https://build.opensuse.org/request/show/1175672 Backports:SLE-15-SP5 / chromium
Comment 5 Marcus Meissner 2024-05-22 10:04:57 UTC 
openSUSE-SU-2024:0136-1: An update that fixes 5 vulnerabilities is now available.

Category: security (critical)
Bug References: 1224208,1224294,1224341
CVE References: CVE-2024-4761,CVE-2024-4947,CVE-2024-4948,CVE-2024-4949,CVE-2024-4950
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP5 (src):    chromium-125.0.6422.60-bp155.2.82.1
Comment 6 Andreas Stieger 2024-05-22 11:28:05 UTC 
done