Unrated severityNVD Advisory· Published May 30, 2024· Updated Feb 13, 2025
CVE-2024-5496
CVE-2024-5496
Description
Use after free in Media Session in Google Chrome prior to 125.0.6422.141 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)
Affected products
15- osv-coords14 versionspkg:apk/chainguard/chromiumpkg:apk/chainguard/chromium-docker-selenium-compatpkg:apk/chainguard/chromium-langpkg:apk/chainguard/chromium-qtpkg:apk/wolfi/chromiumpkg:apk/wolfi/chromium-docker-selenium-compatpkg:apk/wolfi/chromium-langpkg:apk/wolfi/chromium-qtpkg:rpm/opensuse/chromium&distro=openSUSE%20Leap%2015.6pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/libqt5-qtwebengine&distro=openSUSE%20Tumbleweedpkg:rpm/opensuse/opera&distro=openSUSE%20Leap%2015.5%20NonFreepkg:rpm/opensuse/opera&distro=openSUSE%20Leap%2015.6%20NonFreepkg:rpm/suse/chromium&distro=SUSE%20Package%20Hub%2015%20SP6
< 125.0.6422.141-r0+ 13 more
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-r0
- (no CPE)range: < 125.0.6422.141-bp156.2.3.1
- (no CPE)range: < 125.0.6422.141-1.1
- (no CPE)range: < 5.15.18-1.1
- (no CPE)range: < 111.0.5168.43-lp155.3.51.1
- (no CPE)range: < 112.0.5197.25-lp156.2.11.1
- (no CPE)range: < 125.0.6422.141-bp156.2.3.1
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.htmlmitre
- issues.chromium.org/issues/338929744mitre
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/mitre
- lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/mitre
News mentions
0No linked articles in our index yet.