CVE-2024-7971

Published Aug 21, 2024

Last updated 3 months ago

Google Chrome

Overview

AI description

Generated using AI and has not been reviewed by Intruder. May contain errors.

CVE-2024-7971 is a type confusion vulnerability found in the V8 JavaScript and WebAssembly engine within Google Chrome versions prior to 128.0.6613.84. This flaw allows a remote attacker to potentially exploit heap corruption through a crafted HTML page. The vulnerability stems from the Liftoff compiler's handling of loop structures during WebAssembly (WASM) JIT compilation, where it doesn't enforce strict type checks, potentially leading to memory corruption. It has been reported that this vulnerability has been exploited in the wild.

Description: Type confusion in V8 in Google Chrome prior to 128.0.6613.84 allowed a remote attacker to exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Source: chrome-cve-admin@google.com
NVD status: Analyzed

Risk scores

CVSS 3.1

Type: Primary
Base score: 9.6
Impact score: 6
Exploitability score: 2.8
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Severity: CRITICAL

Known exploits

Data from CISA

Vulnerability name: Google Chromium V8 Type Confusion Vulnerability
Exploit added on: Aug 26, 2024
Exploit action due: Sep 16, 2024
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Weaknesses

chrome-cve-admin@google.com: CWE-843
nvd@nist.gov: CWE-843
134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-843

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 1

Configurations

[
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "DAE0C7AB-1D61-4449-BC82-915B019F311F",
            "versionEndExcluding": "128.0.6613.84"
          }
        ],
        "operator": "OR"
      }
    ]
  },
  {
    "nodes": [
      {
        "negate": false,
        "cpeMatch": [
          {
            "criteria": "cpe:2.3:a:microsoft:edge:*:*:*:*:*:*:*:*",
            "vulnerable": true,
            "matchCriteriaId": "5B3C4915-21C5-4DB1-8791-EB3AEB04A654",
            "versionEndExcluding": "128.0.2739.42"
          }
        ],
        "operator": "OR"
      }
    ]
  }
]