CVE-2024-0519: Google Chromium V8 Out-of-Bounds Memory Access Vulnerability

Vulnerability summary

CVE-2024-0519 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in Google Chromium V8. It is known to be exploited: CISA lists it, first on 17-01-2024. EPSS estimates a 3.80% chance of exploitation in the next 30 days, higher than 89.8% of scored vulnerabilities.

Timeline

1. 16-01-2024
   PublishedVulnerability first disclosed.
2. 17-01-2024
   Added to CISA KEVGoogle Chromium V8 Out-of-Bounds Memory Access Vulnerability
3. 07-02-2024
   CISA remediation dueApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
4. 21-10-2025
   Last modifiedVulnerability information updated.

Description

Out of bounds memory access in V8 in Google Chrome prior to 120.0.6099.224 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

• CWE-787Out-of-bounds WriteThe product writes data past the end, or before the beginning, of the intended buffer.
• CWE-125Out-of-bounds ReadThe product reads data past the end, or before the beginning, of the intended buffer.