CVE-2024-7972 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer9 documents8 sources

Severity

8.8HIGHNVD

EPSS

0.6%

top 29.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Google Chrome Chromium Paloalto Prisma Browser

Timeline

PublishedAug 21

Latest updateSep 11

Description

Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to potentially perform out of bounds memory access via a crafted HTML page. (Chromium security severity: Medium)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5google/chrome128.0.6613.84 — 128.0.6613.84

▶NVDgoogle/chrome< 128.0.6613.84

▶Debianchromium/chromium< 128.0.6613.84-1~deb12u1+2

▶Palo Altopaloalto/prisma_browser

🔴Vulnerability Details

OSV

CVE-2024-7972: Inappropriate implementation in V8 in Google Chrome prior to 128↗2024-08-21

▶

CVEList

CVE-2024-7972: Inappropriate implementation in V8 in Google Chrome prior to 128↗2024-08-21

▶

GHSA

GHSA-q3q8-95m2-545r: Inappropriate implementation in V8 in Google Chrome prior to 128↗2024-08-21

▶

📋Vendor Advisories

Palo Alto

PAN-SA-2024-0009 Prisma Browser: Monthly Vulnerability Updates↗2024-09-11

▶

Chrome

Stable Channel Update for ChromeOS / ChromeOS Flex: CVE-2024-7968↗2024-09-09

▶

Chrome

Stable Channel Update for Desktop: CVE-2024-7972↗2024-08-21

▶

Microsoft

Chromium: CVE-2024-7972 Inappropriate implementation in V8↗2024-08-13

▶

Debian

CVE-2024-7972: chromium - Inappropriate implementation in V8 in Google Chrome prior to 128.0.6613.84 allow...↗2024

▶