CVE-2021-21192: Heap buffer overflow in tab groups

Reference Links

• https://security-tracker.debian.org/tracker/CVE-2021-21192
• https://chromereleases.googleblog.com/2021/03/stable-channel-update-for-desktop_12.html (Advisory)
• https://crbug.com/1181387
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/
• https://security.gentoo.org/glsa/202104-08
• https://www.debian.org/security/2021/dsa-4886
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/N52OWF4BAP3JNK2QYGU3Q6QUVDZDCIMQ/

Parent vulnerabilities

(Appears in the following advisories)

• 5280375550425303743

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-21191
• CVE-2021-21193

Frequently Asked Questions

• What is the severity of CVE-2021-21192?

  CVE-2021-21192 has a high severity rating due to its potential for remote exploitation via crafted HTML pages.

• How do I fix CVE-2021-21192?

  To fix CVE-2021-21192, update your Google Chrome or Chromium browser to the versions 90.0.4430.212 or higher.

• Which software versions are affected by CVE-2021-21192?

  CVE-2021-21192 affects Google Chrome versions prior to 89.0.4389.90 and specific versions of Chromium on Debian and Fedora.

• Is there a workaround for CVE-2021-21192?

  Currently, there are no specific workarounds for CVE-2021-21192; the best prevention is to update your software.

• What kind of attack is possible with CVE-2021-21192?

  CVE-2021-21192 allows for heap buffer overflow attacks that could lead to heap corruption and potential system exploitation.