CVE-2024-9957

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 130.0.6723.58

Description The issue is related to a use-after-free vulnerability in the user interface of Google Chrome on iOS. This vulnerability can be exploited by a remote attacker who convinces a user to engage in specific UI gestures, potentially allowing the attacker to exploit heap corruption via a crafted HTML page. The estimated severity of this issue is medium.

Recommendations For Google Chrome versions prior to 130.0.6723.58, update to version 130.0.6723.58 or later to resolve the issue. As a temporary workaround, consider avoiding the use of specific UI gestures that may trigger the vulnerability until a patch is applied. Restrict access to crafted HTML pages to minimize the risk of exploitation.