Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a...

原文の説明

取得元が公開している説明をそのまま載せています (多くは英語)。

Use after free in File Input in Google Chrome on Linux prior to 149.0.7827.155 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

出典: OSV.dev (Open Source Vulnerabilities) OSV

影響パッケージ

Debian:12 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"149.0.7827.155-1~deb12u1"}]}]

Debian:13 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"149.0.7827.155-1~deb13u1"}]}]

Debian:14 chromium

[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"149.0.7827.155-1"}]}]

参照URL

advisory security-tracker.debian.org