CVE-2024-1938: Type Confusion in V8

Published Feb 11, 2024
·
Updated

Chromium: CVE-2024-1938 Type Confusion in V8

Other sources

This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see Google Chrome Releases for more information.

Microsoft

Type Confusion in V8 in Google Chrome prior to 122.0.6261.94 allowed a remote attacker to potentially exploit object corruption via a crafted HTML page. (Chromium security severity: High)

MITRE

Credit

5f46f4ee2e17957ba7b39897fb376be8

Affected Software

6 affected componentsFixes available
Microsoft Edge (Chromium-based)
Google Chrome<122.0.6261.94
122.0.6261.94
Google Chrome<122.0.6261.94
fedoraproject fedora=38
fedoraproject fedora=39
fedoraproject fedora=40

Event History

Feb 11, 2024
CVE Published
12:00 AM
Feb 29, 2024
CVE Published
via MITRE·12:25 AM
Data Sourced
via MITRE·12:25 AM
DescriptionWeakness
Data Sourced
via Microsoft·08:04 PM
DescriptionSeverityWeakness

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

1

What is the severity of CVE-2024-1938?

CVE-2024-1938 is classified with a high severity due to a type confusion vulnerability in Chromium.

2

How do I fix CVE-2024-1938?

To remedy CVE-2024-1938, update Google Chrome and Microsoft Edge to version 122.0.6261.94 or later.

3

Which versions of software are affected by CVE-2024-1938?

CVE-2024-1938 affects Google Chrome versions before 122.0.6261.94 and Microsoft Edge (Chromium-based) prior to the latest updates.

4

Is CVE-2024-1938 applicable to Fedora users?

Yes, CVE-2024-1938 impacts Fedora users running versions 38, 39, and 40.

5

What type of vulnerability is CVE-2024-1938?

CVE-2024-1938 is identified as a type confusion vulnerability, which can lead to potential exploitation.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203