CVE-2024-6775

Upstream information

CVE-2024-6775 at MITRE

Description

Use after free in Media Stream in Google Chrome prior to 126.0.6478.182 allowed a remote attacker who convinced a user to engage in specific UI gestures to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

---

SUSE information

Overall state of this security issue: Resolved

This issue is currently rated as having important severity.

SUSE Bugzilla entry: 1227979 [RESOLVED / FIXED]

SUSE Security Advisories:

• openSUSE-SU-2024:0212-1, published Mon Jul 22 16:48:45 2024
• openSUSE-SU-2024:0212-2, published Sat Aug 24 14:48:34 2024
• openSUSE-SU-2024:0242-1, published Thu Aug 15 22:49:13 2024
• openSUSE-SU-2024:0252-1, published Sun Aug 18 22:47:36 2024

List of released packages

Product(s)	Fixed package version(s)	References
SUSE Package Hub 15 SP5	chromedriver >= 126.0.6478.182-bp155.2.99.1 chromium >= 126.0.6478.182-bp155.2.99.1	Patchnames: openSUSE-2024-212
SUSE Package Hub 15 SP6	chromedriver >= 126.0.6478.182-bp156.2.11.1 chromium >= 126.0.6478.182-bp156.2.11.1	Patchnames: openSUSE-2024-212
openSUSE Leap 15.5	chromedriver >= 126.0.6478.182-bp155.2.99.1 chromium >= 126.0.6478.182-bp155.2.99.1	Patchnames: openSUSE-2024-212
openSUSE Leap 15.5 NonFree	opera >= 112.0.5197.53-lp155.3.57.1	Patchnames: openSUSE-2024-252
openSUSE Leap 15.6	chromedriver >= 126.0.6478.182-bp156.2.11.1 chromium >= 126.0.6478.182-bp156.2.11.1	Patchnames: openSUSE-2024-212
openSUSE Leap 15.6 NonFree	opera >= 112.0.5197.53-lp156.2.14.1	Patchnames: openSUSE-2024-242
openSUSE Tumbleweed	chromedriver >= 126.0.6478.182-1.1 chromium >= 126.0.6478.182-1.1	Patchnames: openSUSE-Tumbleweed-2024-14205

---

SUSE Timeline for this CVE

CVE page created: Wed Jul 17 09:15:07 2024
CVE page last modified: Thu Oct 17 00:50:40 2024