First published: Sat Nov 06 2021(Updated: )
Heap buffer overflow in ANGLE in Google Chrome prior to 96.0.4664.93 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit: chrome-cve-admin@google.com Abraruddin Khan Omair chrome-cve-admin@google.com
Affected Software | Affected Version | How to fix |
---|---|---|
debian/chromium | <=90.0.4430.212-1~deb10u1 | 116.0.5845.180-1~deb11u1 118.0.5993.70-1~deb11u1 116.0.5845.180-1~deb12u1 118.0.5993.70-1~deb12u1 118.0.5993.70-1 |
Google Chrome | <96.0.4664.93 | 96.0.4664.93 |
Google Chrome | <96.0.4664.93 | |
Fedoraproject Fedora | =34 | |
Debian | =10.0 | |
Debian | =11.0 | |
Debian Debian Linux | =10.0 | |
Debian Debian Linux | =11.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
CVE-2021-4058 is classified as a high severity vulnerability due to the potential for arbitrary code execution resulting from a heap buffer overflow.
To address CVE-2021-4058, update Google Chrome or Chromium to version 96.0.4664.93 or later.
CVE-2021-4058 affects Google Chrome versions prior to 96.0.4664.93.
CVE-2021-4058 impacts systems running vulnerable versions of Google Chrome and specific Debian distributions.
Yes, CVE-2021-4058 can potentially be exploited remotely via a crafted HTML page.