PT-2024-6710 · Google+4 · Google Chrome+4

CVE-2024-7025

·

Published

2024-09-18

·

Updated

2025-03-19

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 129.0.6668.89
Description: The issue is related to an integer overflow in the Layout component of Google Chrome, which can lead to heap corruption. This can be exploited by a remote attacker using a crafted HTML page, potentially allowing the execution of arbitrary code. The severity of this issue is considered high.
Recommendations: For Google Chrome versions prior to 129.0.6668.89, update to version 129.0.6668.89 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

Exploit

Fix

Integer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

ALT-PU-2024-17740
ALT-PU-2025-4366
BDU:2024-07923
CVE-2024-7025
DSA-5781-1
MGASA-2024-0341
MGASA-2025-0020
OPENSUSE-SU-2024:0327-1
OPENSUSE-SU-2024:14383-1
OPENSUSE-SU-2024:14425-1

Affected Products

Alt Linux
Astra Linux
Debian
Google Chrome
Red Os