6.5
CVSSv3

CVE-2018-6129

Published: 27/06/2019 Updated: 07/11/2023
CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6
CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8
VMScore: 435
Vector: AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Summary

Out of bounds array access in WebRTC in Google Chrome before 67.0.3396.62 allowed a remote malicious user to potentially perform out of bounds memory access via a crafted HTML page.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

google chrome

Vendor Advisories

Synopsis Important: chromium-browser security update Type/Severity Security Advisory: Important Topic An update for chromium-browser is now available for Red Hat Enterprise Linux 6 SupplementaryRed Hat Product Security has rated this update as having a security impact of Important A Common Vulnerability S ...
Several vulnerabilities have been discovered in the chromium web browser CVE-2018-6118 Ned Williamson discovered a use-after-free issue CVE-2018-6120 Zhou Aiting discovered a buffer overflow issue in the pdfium library CVE-2018-6121 It was discovered that malicious extensions could escalate privileges CVE-2018-6122 A type confu ...

Exploits

There is a missing check in VP9 frame processing that could lead to memory corruption In the file video_coding/rtp_frame_reference_findercc, the function RtpFrameReferenceFinder::MissingRequiredFrameVp9 contains the following code: size_t temporal_idx = infogof->temporal_idx[gof_idx]; for (size_t l = 0; l < temporal_idx; ++l) { ...