Skip to content
OpenAdvisories
Medium · 4.3 CVE-2024-11920 EUVD-2024-55075GHSA-jm26-2m6v-322r

Inappropriate implementation in Dawn in Google Chrome on Mac prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memo…

Published Nov 14, 2025 · Updated Nov 14, 2025 · Assigned by Chrome

Vendor: Google Product: Chrome Package: chromium Category: Browsers Ecosystem: Wolfi

Description

Inappropriate implementation in Dawn in Google Chrome on Mac prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 130.0.6723.92 – < 130.0.6723.92 130.0.6723.92

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 130.0.6723.92-r0 —

References