Skip to content
OpenAdvisories
Unscored CVE-2021-4317 EUVD-2021-34146GHSA-qr27-28hj-hhxg

Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML…

Published Jul 28, 2023 · Updated Feb 13, 2025 · Assigned by Chrome

Description

Use after free in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to perform arbitrary read/write via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 96.0.4664.93 – < 96.0.4664.93 96.0.4664.93

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 97.0.4692.71-0.1 —
Debian 13 chromium 97.0.4692.71-0.1 —
Debian 12 chromium 97.0.4692.71-0.1 —
Debian 11 chromium 97.0.4692.71-0.1~deb11u1 DSA-5046-1

Advisories 1

References