Skip to content
OpenAdvisories
Unscored CVE-2021-4100 EUVD-2021-33985GHSA-pjg5-4frx-8m6r

Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption vi…

Published Feb 11, 2022 · Updated Aug 3, 2024 · Assigned by Chrome

Description

Object lifecycle issue in ANGLE in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 96.0.4664.110 96.0.4664.110

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 97.0.4692.71-0.1 —
Debian 13 chromium 97.0.4692.71-0.1 —
Debian 12 chromium 97.0.4692.71-0.1 —
Debian 11 chromium 97.0.4692.71-0.1~deb11u1 DSA-5046-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 97.0.4692.71-0ubuntu0.18.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP3 chromium 96.0.4664.110-bp153.2.48.1 openSUSE-SU-2021:1600-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 96.0.4664.110-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:11687-1
openSUSE Leap 15.4 opera 85.0.4341.28-lp154.2.5.1 openSUSE-SU-2022:0110-1
openSUSE Leap 15.3 chromium 96.0.4664.110-bp153.2.48.1 openSUSE-SU-2021:1600-1
openSUSE Leap 15.3 opera 83.0.4254.27-lp153.2.33.1 openSUSE-SU-2022:0047-1
openSUSE Leap 15.2 chromium 96.0.4664.110-lp152.2.143.1 openSUSE-SU-2021:1632-1

Advisories 7

References