{
  "cveId": "CVE-2024-6993",
  "url": "https://patchblox.com/security/cve/CVE-2024-6993",
  "summary": "CVE-2024-6993 is fixed in 3 products on 1 platform, first by OPENSUSE-SU-2024:0254-2, released August 18, 2024. It is not reported as exploited. Patch Radar priority: Routine.",
  "title": "chromium: This update for chromium, gn, rust-bindgen fixes the following issues:\n\n- Chromium 127.0.6533.119 (boo#1228941)\n\n  *...",
  "description": "This update for chromium, gn, rust-bindgen fixes the following issues:\n\n- Chromium 127.0.6533.119 (boo#1228941)\n\n  * CVE-2024-7532: Out of bounds memory access in ANGLE\n  * CVE-2024-7533: Use after free in Sharing\n  * CVE-2024-7550: Type Confusion in V8\n  * CVE-2024-7534: Heap buffer overflow in Layout\n  * CVE-2024-7535: Inappropriate implementation in V8\n  * CVE-2024-7536: Use after free in WebAudio\n\n- Chromium 127.0.6533.88 (boo#1228628, boo#1228940, boo#1228942)\n\n  * CVE-2024-6988: Use after free in Downloads\n  * CVE-2024-6989: Use after free in Loader\n  * CVE-2024-6991: Use after free in Dawn\n  * CVE-2024-6992: Out of bounds memory access in ANGLE\n  * CVE-2024-6993: Inappropriate implementation in Canvas\n  * CVE-2024-6994: Heap buffer overflow in Layout\n  * CVE-2024-6995: Inappropriate implementation in Fullscreen\n  * CVE-2024-6996: Race in Frames\n  * CVE-2024-6997: Use after free in Tabs\n  * CVE-2024-6998: Use after free in User Education\n  * CVE-2024-6999: Inappropriate implementation in FedCM\n  * CVE-2024-7000: Use after free in CSS. Reported by Anonymous\n  * CVE-2024-7001: Inappropriate implementation in HTML\n  * CVE-2024-7003: Inappropriate implementation in FedCM\n  * CVE-2024-7004: Insufficient validation of untrusted input\n    in Safe Browsing\n  * CVE-2024-7005: Insufficient validation of untrusted input\n    in Safe Browsing\n  * CVE-2024-6990: Uninitialized Use in Dawn\n  * CVE-2024-7255: Out of bounds read in WebTransport\n  * CVE-2024-7256: Insufficient data validation in Dawn\n\ngh:\n\n- Update to version 0.20240730:\n  * Rust: link_output, depend_output and runtime_outputs for dylibs\n  * Add missing reference section to function_toolchain.cc\n  * Do not cleanup args.gn imports located in the output directory.\n  * Fix expectations in NinjaRustBinaryTargetWriterTest.SwiftModule\n  * Do not add native dependencies to the library search path\n  * Support linking frameworks and swiftmodules in Rust targets\n  * [desc] Silence print() statements when outputing json\n  * infra: Move CI/try builds to Ubuntu-22.04\n  * [MinGW] Fix mingw building issues\n  * [gn] Fix \u0027link\u0027 in the //examples/simple_build/build/toolchain/BUILD.gn\n  * [template] Fix \u0027rule alink_thin\u0027 in the //build/build_linux.ninja.template\n  * Allow multiple --ide switches\n  * [src] Add \u0027#include \u003Climits\u003E\u0027 in the //src/base/files/file_enumerator_win.cc\n  * Get updates to infra/recipes.py from upstream\n  * Revert \u0027Teach gn to handle systems with \u003E 64 processors\u0027\n  * [apple] Rename the code-signing properties of create_bundle\n  * Fix a typo in \u0027gn help refs\u0027 output\n  * Revert \u0027[bundle] Use \u0027phony\u0027 builtin tool for create_bundle targets\u0027\n  * [bundle] Use \u0027phony\u0027 builtin tool for create_bundle targets\n  * [ios] Simplify handling of assets catalog\n  * [swift] List all outputs as deps of \u0027source_set\u0027 stamp file\n  * [swift] Update \u0060gn check ...\u0060 to consider the generated header\n  * [swift] Set \u0060restat = 1\u0060 to swift build rules\n  * Fix build with gcc12\n  * [label_matches] Add new functions label_matches(), filter_labels_include() and filter_labels_exclude()\n  * [swift] Remove problematic use of \u0027stamp\u0027 tool\n  * Implement new --ninja-outputs-file option.\n  * Add NinjaOutputsWriter class\n  * Move InvokePython() function to its own source file.\n  * zos: build with -DZOSLIB_OVERRIDE_CLIB to override creat\n  * Enable C\u002B\u002B runtime assertions in debug mode.\n  * Fix regression in MakeRelativePath()\n  * fix: Fix Windows MakeRelativePath.\n  * Add long path support for windows\n  * Ensure read_file() files are considered by \u0027gn analyze\u0027\n  * apply 2to3 to for some Python scripts\n  * Add rustflags to desc and help output\n  * strings: support case insensitive check only in StartsWith/EndsWith\n  * add .git-blame-ignore-revs\n  * use std::{string,string_view}::{starts_with,ends_with}\n  * apply clang-format to all C\u002B\u002B sources\n  * add forward declaration in rust_values.h\n  * Add \u0060root_patterns\u0060 list to build configuration.\n  * Use c\u002B\u002B20 in GN build\n  * update windows sdk to 2024-01-11\n  * update windows sdk\n  * Add linux-riscv64.\n  * Update OWNERS list.\n  * remove unused function\n  * Ignore build warning -Werror=redundant-move\n  * Fix --as=buildfile \u0060gn desc deps\u0060 output.\n  * Update recipe engine to 9dea1246.\n  * treewide: Fix spelling mistakes\n\nAdded rust-bindgen:\n\n- Version 0.69.1",
  "published": "2024-08-18T22:20:17Z",
  "severity": "",
  "priority": "Routine",
  "priorityTier": 4,
  "exploited": false,
  "vendorExploited": false,
  "disclosed": false,
  "fixes": [
    {
      "platform": "linux",
      "product": "chromium",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "127.0.6533.119-bp156.2.14.1",
      "fix": "OPENSUSE-SU-2024:0254-2",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2024-0254-2",
      "released": "2024-08-18T22:20:17Z"
    },
    {
      "platform": "linux",
      "product": "gn",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.20240730-bp156.2.3.1",
      "fix": "OPENSUSE-SU-2024:0254-2",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2024-0254-2",
      "released": "2024-08-18T22:20:17Z"
    },
    {
      "platform": "linux",
      "product": "rust-bindgen",
      "release": "opensuse-leap 15.6",
      "fixedVersion": "0.69.1-bp156.2.1",
      "fix": "OPENSUSE-SU-2024:0254-2",
      "url": "https://patchblox.com/security/fix/linux/opensuse-su-2024-0254-2",
      "released": "2024-08-18T22:20:17Z"
    }
  ],
  "noFixYet": [],
  "dataAsOf": "2026-11-09T19:38:12Z",
  "attribution": {
    "text": "Data: Patchblox Patch Radar",
    "url": "https://patchblox.com/security/patch-radar",
    "terms": "https://patchblox.com/security/patch-radar/use-the-data"
  }
}