CVE-2024-0224: Use after free in WebAudio

Reference Links

• https://chromereleases.googleblog.com/2024/01/stable-channel-update-for-desktop.html (Advisory)
• https://crbug.com/1505086
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AYONA2XSNFMXLAW4IHLFI5UVV3QRNG5K/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D6C2HN4T2S6GYNTAUXLH45LQZHK7QPHP/
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-0224 (Advisory)
• https://security.gentoo.org/glsa/202401-34

Parent vulnerabilities

(Appears in the following advisories)

• 1231943095317551449

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-0222
• CVE-2024-0223
• CVE-2024-0225

Frequently Asked Questions

• What is the severity of CVE-2024-0224?

  CVE-2024-0224 is classified as a high-severity vulnerability that can lead to use after free errors in affected software.

• How do I fix CVE-2024-0224?

  To fix CVE-2024-0224, update your Google Chrome to version 120.0.6099.199 or later, or update Microsoft Edge (Chromium-based) as per the latest security release notes.

• What products are vulnerable to CVE-2024-0224?

  CVE-2024-0224 affects Google Chrome versions prior to 120.0.6099.199 and Microsoft Edge (Chromium-based) versions older than the latest update.

• Can CVE-2024-0224 affect other operating systems?

  Yes, CVE-2024-0224 can affect any operating system that runs vulnerable versions of Google Chrome or Microsoft Edge (Chromium-based).

• How was CVE-2024-0224 discovered?

  CVE-2024-0224 was identified through security assessments of Chromium and reported by the Chrome security team.