Bug 1224294 (CVE-2024-4761) - VUL-0: CVE-2024-4761: chromium,ungoogled-chromium: out of bounds write in V8
Summary: VUL-0: CVE-2024-4761: chromium,ungoogled-chromium: out of bounds write in V8
Status: RESOLVED FIXED
Alias: CVE-2024-4761
Product: SUSE Security Incidents
Classification: Novell Products
Component: Incidents (show other bugs)
Version: unspecified
Hardware: Other Other
: P3 - Medium : Normal
Target Milestone: ---
Assignee: Security Team bot
QA Contact: Security Team bot
URL: https://smash.suse.de/issue/405653/
Whiteboard:
Keywords:
Depends on: 1224178
Blocks:
  Show dependency tree / graph
 
Reported: 2024-05-15 11:47 UTC by SMASH SMASH
Modified: 2024-05-22 11:28 UTC (History)
3 users (show)

See Also:
Found By: Security Response Team
Services Priority:
Business Priority:
Blocker: ---
Marketing QA Status: ---
IT Deployment: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description SMASH SMASH 2024-05-15 11:47:16 UTC 
Out of bounds write in V8 in Google Chrome prior to 124.0.6367.207 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

References:
http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2024-4761
https://www.cve.org/CVERecord?id=CVE-2024-4761
https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_13.html
https://issues.chromium.org/issues/339458194
Comment 1 Carlos López 2024-05-15 11:47:49 UTC 
This is version 124.0.6367.207
Comment 2 OBSbugzilla Bot 2024-05-15 13:15:04 UTC 
This is an autogenerated message for OBS integration:
This bug (1224294) was mentioned in
https://build.opensuse.org/request/show/1174247 Factory / chromium
Comment 4 OBSbugzilla Bot 2024-05-22 06:55:04 UTC 
This is an autogenerated message for OBS integration:
This bug (1224294) was mentioned in
https://build.opensuse.org/request/show/1175672 Backports:SLE-15-SP5 / chromium
Comment 5 Marcus Meissner 2024-05-22 10:04:57 UTC 
openSUSE-SU-2024:0136-1: An update that fixes 5 vulnerabilities is now available.

Category: security (critical)
Bug References: 1224208,1224294,1224341
CVE References: CVE-2024-4761,CVE-2024-4947,CVE-2024-4948,CVE-2024-4949,CVE-2024-4950
JIRA References: 
Sources used:
openSUSE Backports SLE-15-SP5 (src):    chromium-125.0.6422.60-bp155.2.82.1
Comment 6 Andreas Stieger 2024-05-22 11:28:05 UTC 
done