CVE-2024-2626: Out of bounds read in Swiftshader

Reference Links

• https://chromereleases.googleblog.com/2024/03/stable-channel-update-for-desktop_19.html (Advisory)
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-2626 (Advisory)
• https://issues.chromium.org/issues/40945098
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2D3Z6CRRN4J3IUZPJZVURGMRBN6WFPTU/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/AQVVW4FLQDIJ2UABGXK2SMS5AUGT54FM/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6JINDYFB3MPH43ECTI72BV63K4RXSG22/

Parent vulnerabilities

(Appears in the following advisories)

• 5940872914351812144

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-2627
• CVE-2024-2628
• CVE-2024-2629
• CVE-2024-2630
• CVE-2024-2631

Frequently Asked Questions

• What is the severity of CVE-2024-2626?

  CVE-2024-2626 has been categorized as a high severity vulnerability due to its potential impact on user confidentiality and system integrity.

• How do I fix CVE-2024-2626?

  To address CVE-2024-2626, ensure that you update Google Chrome to version 123.0.6312.58 or later.

• Which browsers are affected by CVE-2024-2626?

  CVE-2024-2626 affects Google Chrome and Microsoft Edge (Chromium-based) as they both rely on the Chromium engine.

• What type of vulnerability is CVE-2024-2626?

  CVE-2024-2626 is an out of bounds read vulnerability, which could allow unauthorized access to sensitive data.

• Is CVE-2024-2626 applicable to Fedora users?

  Yes, CVE-2024-2626 affects Fedora versions 38, 39, and 40, so users should apply the relevant updates.