CVE-2018-6038
chromium-browser: Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of...
CVE-2018-6038 is fixed in 5 products on 1 platform, first by chromium-browser 64.0.3282.119-0ubuntu1, released September 25, 2018. It is not reported as exploited. Patch Radar priority: Routine.
Routine
CVSS
n/a
Medium
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0154
75th percentile
Heap buffer overflow in WebGL in Google Chrome prior to 64.0.3282.119 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.
Where it's fixed
| Product | Fixed in | Fix | Released |
|---|---|---|---|
| Linux | |||
| chromium-browser · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-browser 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-browser-l10n 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-chromedriver 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-codecs-ffmpeg 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |
| chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) | 64.0.3282.119-0ubuntu1 | chromium-codecs-ffmpeg-extra 64.0.3282.119-0ubuntu1 | Sep 25, 2018 |