Vulnerability CVE-2021-38007: Information

Description

Type confusion in V8 in Google Chrome prior to 96.0.4664.45 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Severity: HIGH (8.8) Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

URL: https://nvd.nist.gov/vuln/detail/CVE-2021-38007

Published: Dec. 23, 2021

Modified: Nov. 7, 2023

Error type identifier: CWE-843

Fixed packages

Package name	Branch	Fixed in version	Version from repository	Errata ID	Task #	State
chromium	sisyphus	96.0.4664.45-alt1	125.0.6422.141-alt1	ALT-PU-2021-3298-1	289982	Fixed
chromium	p10	96.0.4664.45-alt2.p10.1	119.0.6045.159-alt0.p10.1	ALT-PU-2021-3408-1	289351	Fixed
chromium	p9	96.0.4664.45-alt2.p9.1	97.0.4692.99-alt0.p9.1	ALT-PU-2021-3583-1	291748	Fixed
chromium	c10f1	96.0.4664.45-alt2.p10.1	110.0.5481.177-alt1.p10.1	ALT-PU-2021-3408-1	289351	Fixed
chromium	p11	96.0.4664.45-alt1	125.0.6422.141-alt1	ALT-PU-2021-3298-1	289982	Fixed
chromium-gost	sisyphus	96.0.4664.45-alt1	124.0.6367.78-alt1	ALT-PU-2021-3329-1	290370	Fixed
chromium-gost	p10	96.0.4664.45-alt2.p10.1	110.0.5481.177-alt1.p10.1	ALT-PU-2021-3431-1	290499	Fixed
chromium-gost	p9	96.0.4664.45-alt2.p9.1	96.0.4664.45-alt2.p9.1	ALT-PU-2021-3603-1	291751	Fixed
chromium-gost	c10f1	96.0.4664.45-alt2.p10.1	110.0.5481.177-alt1.p10.1	ALT-PU-2021-3431-1	290499	Fixed
chromium-gost	c9f2	96.0.4664.45-alt2.c9.1	96.0.4664.45-alt2.c9.1	ALT-PU-2021-3436-1	284092	Fixed
chromium-gost	p11	96.0.4664.45-alt1	124.0.6367.78-alt1	ALT-PU-2021-3329-1	290370	Fixed

Hyperlink	Resource
https://chromereleases.googleblog.com/2021/11/stable-channel-update-for-desktop.html	Vendor Advisory
https://crbug.com/1254189	Permissions Required
DSA-5046	Third Party Advisory
FEDORA-2021-6a292e2cf4

Version: v24.5.3