CVE-2021-37986: Heap buffer overflow in Settings
Heap buffer overflow in Settings in Google Chrome prior to 95.0.4638.54 allowed a remote attacker to engage with Dev Tools to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is the severity of CVE-2021-37986?
CVE-2021-37986 is classified as a high severity vulnerability due to the potential for remote exploitation through heap buffer overflow.
What versions are affected by CVE-2021-37986?
CVE-2021-37986 affects Google Chrome versions prior to 95.0.4638.54 and certain versions of Debian's Chromium package.
How do I fix CVE-2021-37986?
To fix CVE-2021-37986, update Google Chrome to version 95.0.4638.54 or later, or update the Debian Chromium package to the recommended versions.
Can CVE-2021-37986 be exploited remotely?
Yes, CVE-2021-37986 allows a remote attacker to exploit heap corruption via a crafted HTML page.
What is a heap buffer overflow as seen in CVE-2021-37986?
A heap buffer overflow occurs when data is written beyond the limits of a buffer allocated in the heap, which can lead to memory corruption and potential arbitrary code execution.