CVE-2018-18342 — Out-of-bounds Write in Google Chrome

CWE-787 — Out-of-bounds Write10 documents7 sources
Severity
8.8HIGHNVD
EPSS
1.9%
top 16.79%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
6
Google ChromeChromiumDebian Linux+3 more
Timeline
PublishedDec 11
Latest updateMay 13

Description

Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome prior to 71.0.3578.80 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages6 packages

▶CVEListV5google/chromeunspecified — 71.0.3578.80
▶NVDgoogle/chrome< 71.0.3578.80
▶Debianchromium/chromium< 71.0.3578.80-1+3

Also affects: Debian Linux 9.0

🔴Vulnerability Details

3
GHSA
GHSA-3r84-3353-c3qj: Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome↗2022-05-13
▶
OSV
CVE-2018-18342: Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome↗2018-12-11
▶
CVEList
CVE-2018-18342: Execution of user supplied Javascript during object deserialization can update object length leading to an out of bounds write in V8 in Google Chrome↗2018-12-11
▶

📋Vendor Advisories

2
Red Hat
chromium-browser: Out of bounds write in V8↗2018-12-04
▶
Debian
CVE-2018-18342: chromium - Execution of user supplied Javascript during object deserialization can update o...↗2018
▶

💬Community

3
Bugzilla
CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-2018-18344 CVE-2018-18345 CVE-2↗2018-12-05
▶
Bugzilla
CVE-2018-18342 chromium-browser: Out of bounds write in V8↗2018-12-05
▶
Bugzilla
CVE-2018-17480 CVE-2018-17481 CVE-2018-18335 CVE-2018-18336 CVE-2018-18337 CVE-2018-18338 CVE-2018-18339 CVE-2018-18340 CVE-2018-18341 CVE-2018-18342 CVE-2018-18343 CVE-2018-18344 CVE-2018-18345 CVE-2↗2018-12-05
▶
CVE-2018-18342 — Out-of-bounds Write in Google Chrome | cvebase