CVE-2024-2627 in Google and Fedora Project Products
Published on March 20, 2024
Use after free in Canvas in Google Chrome prior to 123.0.6312.58 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Vulnerability Analysis
CVE-2024-2627 can be exploited with network access, requires user interaction. This vulnerability is considered to have a low attack complexity. It has an exploitability score of 2.8 out of four. The potential impact of an exploit of this vulnerability is considered to be very high.
What is a Dangling pointer Vulnerability?
Referencing memory after it has been freed can cause a program to crash, use unexpected values, or execute code.
CVE-2024-2627 has been classified to as a Dangling pointer vulnerability or weakness.
Products Associated with CVE-2024-2627
You can be notified by stack.watch whenever vulnerabilities like CVE-2024-2627 are published in these products:
What versions are vulnerable to CVE-2024-2627?
-
Google Chrome
Fixed in Version 123.0.6312.58
-
Fedora Project Fedora
Version 38
-
Fedora Project Fedora
Version 39
-
Fedora Project Fedora
Version 40