PT-2018-3214

CVE-2018-17470

·

Published

2018-10-16

·

Updated

2024-06-15

Description by

CVSS 2.0
7.8
High
MetricsAV:N/AC:L/Au:N/C:N/I:N/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 70.0.3538.67
Description A heap buffer overflow in the GPU of Google Chrome allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. The issue is related to a buffer overflow in the GPU engine, which could be exploited by a remote attacker using a specially crafted HTML page, potentially leading to a denial of service.
Recommendations For versions prior to 70.0.3538.67, update to version 70.0.3538.67 or later to resolve the issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Related identifiers
ALT-PU-2018-2599
DSA-4330-1
OPENSUSE-SU-2018_3273-1
OPENSUSE-SU-2018_3396-1
OPENSUSE-SU-2018:3835-1
OPENSUSE-SU-2024:10681-1
OPENSUSE-SU-2024:12948-1
RHSA-2018:3004
RHSA-2018_3004
Found an issue in the description? Have something to add? Feel free to write us 👾