AI description
CVE-2024-5830 is a type confusion vulnerability found in the V8 JavaScript engine, which is a core component of Google Chrome. This flaw allows a remote attacker to execute an out-of-bounds memory write by enticing a user to visit a specially crafted HTML page. The vulnerability is tracked under CWE-843 (Access of Resource Using Incompatible Type) and CWE-787 (Out-of-bounds Write). Exploitation of CVE-2024-5830 can lead to remote code execution within the Chrome sandbox, requiring only that a user loads attacker-controlled web content. The issue stems from a confusion in V8's object transition mechanism, specifically when updating a deprecated map, which can cause an object to unexpectedly become a "dictionary" type rather than a "fast" type. This type confusion can then be leveraged to corrupt internal fields and gain arbitrary read/write access to the V8 heap. The vulnerability affects Google Chrome versions prior to 126.0.6478.54.
- Description
- Type Confusion in V8 in Google Chrome prior to 126.0.6478.54 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)
- Source
- chrome-cve-admin@google.com
- NVD status
- Modified
- Products
- chrome, fedora
CVSS 3.1
- Type
- Primary
- Base score
- 8.8
- Impact score
- 5.9
- Exploitability score
- 2.8
- Vector string
- CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- Severity
- HIGH
- Hype score
- Not currently trending
I performed an N-day research on CVE-2024-5830 (Reported by Man Yue Mo of github security lab) focusing on the exploitation part and the handles confusion technique that was used to escape the sandbox. Do check it out. https://t.co/29ybayl0SC
@FaranAbdullah3
30 Jul 2026
1708 Impressions
5 Retweets
29 Likes
10 Bookmarks
0 Replies
0 Quotes
One Click on a Malicious Site Could Exploit Chrome V8 Engine RCE Vulnerability A critical security vulnerability identified as CVE-2024-5830 has been discovered in Chrome’s V8 JavaScript engine. The flaw, initially reported in May 2024 as bug 342456991... https://t.co/lOa0TFBMfi
@SecurityAid
15 Nov 2024
13 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
[
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*",
"matchCriteriaId": "28906E8E-9158-4473-8807-188F6DF15D13",
"versionEndExcluding": "126.0.6478.54",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
},
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:39:*:*:*:*:*:*:*",
"matchCriteriaId": "B8EDB836-4E6A-4B71-B9B2-AA3E03E0F646",
"vulnerable": true
},
{
"criteria": "cpe:2.3:o:fedoraproject:fedora:40:*:*:*:*:*:*:*",
"matchCriteriaId": "CA277A6C-83EC-4536-9125-97B84C4FAF59",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
]
}
]