CVE-2024-3171
published 2024-07-16CVE-2024-3171: Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to…
PriorityP345high8.8CVSS 3.1
AVNACLPRNUIRSUCHIHAH
EPSS
0.31%
22.9th percentile
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
Affected
7 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chromium | chromium | >= 0 < 122.0.6261.57-1~deb12u1 | 122.0.6261.57-1~deb12u1 |
| chromium | chromium | >= 0 < 122.0.6261.57-1 | 122.0.6261.57-1 |
| chromium | chromium | >= 0 < 122.0.6261.57-1 | 122.0.6261.57-1 |
| debian | chromium | < chromium 122.0.6261.57-1~deb12u1 (bookworm) | chromium 122.0.6261.57-1~deb12u1 (bookworm) |
| chrome | < 122.0.6261.57 | 122.0.6261.57 | |
| chrome | >= 122.0.6261.57 < 122.0.6261.57 | 122.0.6261.57 | |
| chrome_chrome | — | — |
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
osv8.8HIGH
vendor_debian8.8HIGH
vendor_redhat5.5MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
Red Hat
kernel: mm, slub: do not call do_slab_free for kfence object
vendor_redhat·2024-09-04·CVSS 5.5
CVE-2024-44973 [MEDIUM] CWE-20 kernel: mm, slub: do not call do_slab_free for kfence object
kernel: mm, slub: do not call do_slab_free for kfence object
In the Linux kernel, the following vulnerability has been resolved:
mm, slub: do not call do_slab_free for kfence object
In 782f8906f805 the freeing of kfence objects was moved from deep
inside do_slab_free to the wrapper functions outside. This is a nice
change, but unfortunately it missed one spot in __kmem_cache_free_bulk.
This results in a crash like this:
BUG skbuff_head_cache (Tainted: G S B E ): Padding overwritten. 0xffff88907fea0f00-0xffff88907fea0fff @offset=3840
slab_err (mm/slub.c:1129)
free_to_partial_list (mm/slub.c:? mm/slub.c:4036)
slab_pad_check (mm/slub.c:864 mm/slub.c:1290)
check_slab (mm/slub.c:?)
free_to_partial_list (mm/slub.c:3171 mm/slub.c:4036)
kmem_cache_alloc_bulk (mm/slub.c:? mm/slub.c:4495 mm/slub.c:
Chrome
Stable Channel Update for Desktop: CVE-2024-3171
vendor_chrome·2024-02-20·CVSS 5.4
CVE-2024-3171 [MEDIUM] Stable Channel Update for Desktop: CVE-2024-3171
Stable Channel Update for Desktop
CVE-2024-3171: Use after free in Accessibility. Reported by ttt on 2023-12-12 [$1000][ 40944847 ] Low CVE-2024-1676: Inappropriate implementation in Navigation
Reported by Khalil Zhani on 2023-11-21 We would also like to thank all security researchers that worked with us during the development cycle to prevent security bugs from ever reaching the stable channel
Severity: medium
Debian
CVE-2024-3171: chromium - Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed ...
vendor_debian·2024·CVSS 8.8
CVE-2024-3171 [HIGH] CVE-2024-3171: chromium - Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed ...
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
Scope: local
bookworm: resolved (fixed in 122.0.6261.57-1~deb12u1)
bullseye: open
forky: resolved (fixed in 122.0.6261.57-1)
sid: resolved (fixed in 122.0.6261.57-1)
trixie: resolved (fixed in 122.0.6261.57-1)
GHSA
GHSA-f2wx-vcrf-76pc: Use after free in Accessibility in Google Chrome prior to 122
ghsa_unreviewed·2024-07-17
CVE-2024-3171 [HIGH] CWE-416 GHSA-f2wx-vcrf-76pc: Use after free in Accessibility in Google Chrome prior to 122
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
OSV
CVE-2024-3171: Use after free in Accessibility in Google Chrome prior to 122
osv·2024-07-16·CVSS 8.8
CVE-2024-3171 [HIGH] CVE-2024-3171: Use after free in Accessibility in Google Chrome prior to 122
Use after free in Accessibility in Google Chrome prior to 122.0.6261.57 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via specific UI gestures. (Chromium security severity: Medium)
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2024-07-16
Published