Insufficient validation of untrusted input in V8 in Google Chrome prior to 89.0.4389.128 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
References
Link | Resource |
---|---|
http://packetstormsecurity.com/files/162437/Google-Chrome-XOR-Typer-Out-Of-Bounds-Access-Remote-Code-Execution.html | Exploit Third Party Advisory VDB Entry |
http://packetstormsecurity.com/files/176210/Chrome-V8-JIT-XOR-Arbitrary-Code-Execution.html | Third Party Advisory VDB Entry |
https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html | Release Notes |
https://crbug.com/1196683 | Exploit Issue Tracking |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/ | Release Notes |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/ | Release Notes |
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/ | Release Notes |
https://security.gentoo.org/glsa/202104-08 | Third Party Advisory |
Configurations
History
25 Jul 2024, 17:31
Type | Values Removed | Values Added |
---|---|---|
References | () http://packetstormsecurity.com/files/162437/Google-Chrome-XOR-Typer-Out-Of-Bounds-Access-Remote-Code-Execution.html - Exploit, Third Party Advisory, VDB Entry | |
References | () http://packetstormsecurity.com/files/176210/Chrome-V8-JIT-XOR-Arbitrary-Code-Execution.html - Third Party Advisory, VDB Entry | |
References | () https://chromereleases.googleblog.com/2021/04/stable-channel-update-for-desktop.html - Release Notes | |
References | () https://crbug.com/1196683 - Exploit, Issue Tracking | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/EAJ42L4JFPBJATCZ7MOZQTUDGV4OEHHG/ - Release Notes | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/U3GZ42MYPGD35V652ZPVPYYS7A7LVXVY/ - Release Notes | |
References | () https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/VUZBGKGVZADNA3I24NVG7HAYYUTOSN5A/ - Release Notes |
14 Dec 2023, 16:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
07 Nov 2023, 03:29
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2021-04-26 17:15
Updated : 2024-07-25 17:31
NVD link : CVE-2021-21220
Mitre link : CVE-2021-21220
CVE.ORG link : CVE-2021-21220
JSON object : View
Products Affected
fedoraproject
- fedora
- chrome
CWE
CWE-787
Out-of-bounds Write