CVE-2024-4559: Heap buffer overflow in WebAudio

Reference Links

• https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_7.html (Advisory)
• https://issues.chromium.org/issues/331369797
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-4559 (Advisory)
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/LE3ASLH6QF2E5OVJI5VA3JSEPJFFFMNY/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/IPETICRXUOGRIM4U3BCRTIKE3IZWCSBT/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/6G7EYH2JAK5OJPVNC6AXYQ5K7YGYNCDN/

Parent vulnerabilities

(Appears in the following advisories)

• 666452299854709625

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-4558

Frequently Asked Questions

• What is the severity of CVE-2024-4559?

  CVE-2024-4559 is classified as a high-severity vulnerability due to the potential for heap buffer overflow attacks.

• How do I fix CVE-2024-4559?

  To remediate CVE-2024-4559, update Google Chrome to version 124.0.6367.155 or later.

• Which software is affected by CVE-2024-4559?

  CVE-2024-4559 affects Google Chrome versions prior to 124.0.6367.155 and Microsoft Edge (Chromium-based) that utilizes the vulnerable Chromium base.

• What type of vulnerability is CVE-2024-4559?

  CVE-2024-4559 is a heap buffer overflow vulnerability that can allow attackers to execute arbitrary code.

• Is CVE-2024-4559 relevant for Fedora users?

  Yes, CVE-2024-4559 impacts Fedora versions 38, 39, and 40 that use affected versions of Chrome.