CVE-2024-5493: Chrome Browser Security Fixes339877165 High Heap buffer overflow in WebRTC338929744 High CVE-2024-5496 Use after free in Media Session

Reference Links

• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2024-5493 (Advisory)
• https://chromereleases.googleblog.com/2024/05/stable-channel-update-for-desktop_30.html
• https://issues.chromium.org/issues/339877165
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/D5SQOWDIVBXQYQPPBSCH7EFISYAOCTHD/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/ZW4TZXVPN3NLZ4UDGZP6OASUM4OVLXX2/
• https://chromereleases.googleblog.com/2024/06/long-term-support-channel-update-for_26.html (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 7136666222389965633

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2024-5499
• CVE-2024-5496

Frequently Asked Questions

• What is the severity of CVE-2024-5493?

  CVE-2024-5493 is classified as a high-severity vulnerability due to its potential for exploitation through a heap buffer overflow.

• How do I fix CVE-2024-5493?

  To fix CVE-2024-5493, ensure that you update Microsoft Edge (Chromium-based) or Google Chrome to the latest versions that address this vulnerability.

• What systems are affected by CVE-2024-5493?

  CVE-2024-5493 primarily affects Microsoft Edge (Chromium-based) and Google Chrome versions prior to 125.0.6422.141.

• Are there any workarounds for CVE-2024-5493?

  There are no specific workarounds recommended for CVE-2024-5493; updating to the latest browser version is the best mitigation.

• Is the vulnerability CVE-2024-5493 present in Ubuntu?

  CVE-2024-5493 does not affect Ubuntu Linux 22.04 but does affect supported versions of Chromium-based browsers on Fedora 39 and 40.