Skip to content
OpenAdvisories
Unscored CVE-2021-37982 EUVD-2021-24455GHSA-56jx-mh9h-fxm3

Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a c…

Published Nov 2, 2021 · Updated Aug 4, 2024 · Assigned by Chrome

Description

Use after free in Incognito in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 95.0.4638.54 95.0.4638.54

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 97.0.4692.71-0.1 —
Debian 13 chromium 97.0.4692.71-0.1 —
Debian 12 chromium 97.0.4692.71-0.1 —
Debian 11 chromium 97.0.4692.71-0.1~deb11u1 DSA-5046-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 95.0.4638.69-0ubuntu0.18.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP3 chromium 95.0.4638.54-bp153.2.37.1 openSUSE-SU-2021:1392-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 95.0.4638.54-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:11598-1
openSUSE Leap 15.4 opera 85.0.4341.28-lp154.2.5.1 openSUSE-SU-2022:0110-1
openSUSE Leap 15.3 chromium 95.0.4638.54-bp153.2.37.1 openSUSE-SU-2021:1392-1
openSUSE Leap 15.3 opera 81.0.4196.31-lp153.2.30.1 openSUSE-SU-2021:1489-1
openSUSE Leap 15.2 chromium 95.0.4638.54-lp152.2.135.1 openSUSE-SU-2021:1396-1
openSUSE Leap 15.2 opera 81.0.4196.31-lp152.2.76.1 openSUSE-SU-2021:1488-1

Advisories 8

References