Skip to content
OpenAdvisories
High · 8.8 CVE-2024-10231 EUVD-2024-32990GHSA-3wfx-mj93-vf8v

Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted…

Published Oct 22, 2024 · Updated Oct 30, 2024 · Assigned by Chrome

Description

Type Confusion in V8 in Google Chrome prior to 130.0.6723.69 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 130.0.6723.69 – < 130.0.6723.69 130.0.6723.69

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 130.0.6723.69-1 —
Debian 13 chromium 130.0.6723.69-1 —
Debian 12 chromium 130.0.6723.69-1~deb12u1 DSA-5799-1
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP6 chromium 130.0.6723.69-bp156.2.44.1 openSUSE-SU-2024:0341-1
SUSE Package Hub 15 SP5 chromium 130.0.6723.69-bp156.2.44.1 openSUSE-SU-2024:0341-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 130.0.6723.69-1.1 openSUSE-SU-2024:14441-1
openSUSE Tumbleweed nodejs-electron 31.7.4-1.1 openSUSE-SU-2024:14494-1
openSUSE Leap 15.6 chromium 130.0.6723.69-bp156.2.44.1 openSUSE-SU-2024:0341-1
openSUSE Leap 15.5 chromium 130.0.6723.69-bp156.2.44.1 openSUSE-SU-2024:0341-1
ReleasePackageFixed inAdvisory
Alpine v3.24 qt6-qtwebengine 6.7.2-r6 —
Alpine v3.23 qt6-qtwebengine 6.7.2-r6 —
Alpine v3.22 qt6-qtwebengine 6.7.2-r6 —
Alpine v3.21 qt6-qtwebengine 6.7.2-r6 —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 130.0.6723.69-r0 —

Advisories 5

References