CVE-2021-4102: Use after free in V8
Google Chromium V8 Engine contains a use-after-free vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Use after free in V8 in Google Chrome prior to 96.0.4664.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 116.0.5845.180-1~deb11u1Fixed in 118.0.5993.70-1~deb11u1Fixed in 116.0.5845.180-1~deb12u1Fixed in 118.0.5993.70-1~deb12u1Fixed in 118.0.5993.70-1 - Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 96.0.4664.110
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2021-4102?
CVE-2021-4102 is a use-after-free vulnerability in the V8 engine in Google Chromium V8 Engine, allowing a remote attacker to potentially exploit heap corruption via a crafted HTML page.
What is the severity of CVE-2021-4102?
The severity of CVE-2021-4102 is high with a CVSS score of 8.8.
Which software is affected by CVE-2021-4102?
Google Chromium V8 Engine and Google Chrome versions up to 96.0.4664.110 are affected by CVE-2021-4102.
How can I fix CVE-2021-4102?
To fix CVE-2021-4102, update your Google Chrome or Google Chromium V8 Engine to version 96.0.4664.110 or later.
Where can I find more information about CVE-2021-4102?
You can find more information about CVE-2021-4102 in the references provided: [1](https://chromereleases.googleblog.com/2021/12/stable-channel-update-for-desktop_13.html), [2](https://crbug.com/1278387), [3](https://security-tracker.debian.org/tracker/CVE-2021-4102).