PT-2024-6809

CVE-2024-8637

·

Published

2024-08-23

·

Updated

2025-07-02

Description by

CVSS 2.0
10
High
MetricsAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome on Android versions prior to 128.0.6613.137 Microsoft Edge (affected versions not specified)
Description The issue is related to a use after free vulnerability in the Media Router component of Google Chrome on Android and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker, potentially allowing them to impact the confidentiality, integrity, and availability of protected information. The exploitation can occur via a crafted HTML page, potentially leading to heap corruption.
Recommendations For Google Chrome on Android versions prior to 128.0.6613.137, update to version 128.0.6613.137 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
Related identifiers
ALT-PU-2024-17740
ALT-PU-2025-2945
ALT-PU-2025-4366
ALT-PU-2025-7539
ALT-PU-2025-8547
DSA-5768-1
INFESA-2024_0004
MGASA-2024-0321
OPENSUSE-SU-2024:0302-1
OPENSUSE-SU-2024:14335-1
Found an issue in the description? Have something to add? Feel free to write us 👾