Integer Overflow Vulnerability in Google Chrome Affects Web Security
CVE-2024-7025

8.8HIGH

Key Information:

Vendor
Google
Status
Chrome
Vendor
CVE Published:
27 November 2024

Summary

An integer overflow vulnerability exists in the Layout component of Google Chrome versions prior to 129.0.6668.89, allowing a remote attacker to craft a malicious HTML page that could lead to heap corruption. This weakness can potentially be leveraged to manipulate memory allocation, leading to unpredictable behavior within the web browser. Users are encouraged to update to the latest version of Google Chrome to mitigate any associated risks.

References

https://chromereleases.googleblog.com/2024/10/stable-chan...
https://issues.chromium.org/issues/367764861

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

Collectors

NVD DatabaseGoogle Feed
.