CVE-2021-37956: Use after free in Offline use

Reference Links

• https://security-tracker.debian.org/tracker/CVE-2021-37956
• https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop_21.html (Advisory)
• https://crbug.com/1243117
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/
• https://www.debian.org/security/2022/dsa-5046
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/4DDW7HAHTS3SDVXBQUY4SURELO5D4X7R/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/PM7MOYYHJSWLIFZ4TPJTD7MSA3HSSLV2/

Parent vulnerabilities

(Appears in the following advisories)

• 6082209000390727773

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2021-37957
• CVE-2021-4318
• CVE-2021-37958
• CVE-2021-37959
• CVE-2021-37961
• CVE-2021-37962
• CVE-2021-37963
• CVE-2021-37964
• CVE-2021-37965
• CVE-2021-37966
• CVE-2021-37967
• CVE-2021-37968
• CVE-2021-37969
• CVE-2021-37970
• CVE-2021-37971
• CVE-2021-37972

Frequently Asked Questions

• What is CVE-2021-37956?

  CVE-2021-37956 is a vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page in Google Chrome on Android prior to version 94.0.4606.54.

• How can CVE-2021-37956 be exploited?

  CVE-2021-37956 can be exploited by a remote attacker who has compromised the renderer process and uses a crafted HTML page.

• What is the affected software for CVE-2021-37956?

  The affected software for CVE-2021-37956 is Google Chrome on Android prior to version 94.0.4606.54.

• How can I fix CVE-2021-37956?

  You can fix CVE-2021-37956 by updating Google Chrome on Android to version 94.0.4606.54 or later.

• Is there any additional information available for CVE-2021-37956?

  Yes, you can find additional information about CVE-2021-37956 at the following reference: [Link](https://security-tracker.debian.org/tracker/CVE-2021-37956).