CVE-2024-3914

Upstream information

CVE-2024-3914 at MITRE

Description

Use after free in V8 in Google Chrome prior to 124.0.6367.60 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

---

Upstream Security Advisories:

• https://www.zerodayinitiative.com/advisories/ZDI-24-365/
• https://www.zerodayinitiative.com/advisories/ZDI-24-366/
• https://www.zerodayinitiative.com/advisories/ZDI-24-367/

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

SUSE Bugzilla entry: 1222958 [RESOLVED / FIXED]

SUSE Security Advisories:

• openSUSE-SU-2024:0128-1, published Thu May 16 18:52:29 2024
• openSUSE-SU-2024:0156-1, published Mon Jun 10 16:52:04 2024

List of released packages

Product(s)	Fixed package version(s)	References
openSUSE Leap 15.5 NonFree	opera >= 110.0.5130.23-lp155.3.45.1	Patchnames: openSUSE-2024-128
openSUSE Leap 15.6 NonFree	opera >= 110.0.5130.64-lp156.2.6.1	Patchnames: openSUSE-2024-156
openSUSE Tumbleweed	nodejs-electron >= 29.3.3-1.1 nodejs-electron-devel >= 29.3.3-1.1 nodejs-electron-doc >= 29.3.3-1.1	Patchnames: openSUSE-Tumbleweed-2024-13945

---

SUSE Timeline for this CVE

CVE page created: Wed Apr 17 13:45:07 2024
CVE page last modified: Tue Sep 3 19:32:24 2024