Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
8.8
CVE-2021-30632: Chromium V8 engine can let attackers corrupt memory
CVE-2021-30632 · published 5 years ago · actively exploited
Summary
The JavaScript engine used in Chromium‑based browsers (such as Chrome, Edge, Opera, and others) can be tricked by a specially crafted web page into writing data outside its intended area, potentially corrupting the program’s memory. This could allow a remote attacker to take control of the browser or crash it. Update your browsers to the latest versions, and apply any security patches released by your operating system’s package manager.
What to do
- Update debian chromium to version 93.0.4577.82-1.
- Update google chrome to version 93.0.4577.82 or later.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| – | chromium v8 | All versions | |
| – | chrome |
< 93.0.4577.82 cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
|
| – | fedoraproject | fedora |
33 35 cpe:2.3:o:fedoraproject:fedora:33:*:*:*:*:*:*:* |
| Debian:12 | debian | chromium |
< 93.0.4577.82-1 Fix: upgrade to 93.0.4577.82-1
|
| Debian:13 | debian | chromium |
< 93.0.4577.82-1 Fix: upgrade to 93.0.4577.82-1
|
| Debian:14 | debian | chromium |
< 93.0.4577.82-1 Fix: upgrade to 93.0.4577.82-1
|
Original advisory text
Google Chromium V8 Out-of-Bounds Write Vulnerability
Google Chromium V8 Engine contains an out-of-bounds write vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
References
- https://security-tracker.debian.org/tracker/CVE-2021-30632 Vendor Advisory
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Release Notes
- http://packetstormsecurity.com/files/172845/Chrome-JIT-Compiler-Type-Confusion.h... Third Party Advisory VDB Entry
- https://chromereleases.googleblog.com/2021/09/stable-channel-update-for-desktop.... Release Notes
- https://crbug.com/1247763 Permissions Required
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedorapro... Release Notes
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-... US Government Resource
Internet-facing
3 days
and check for signs of compromise
Internal
14 days
- Known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker full control
Severity
8.8
High
Known exploited
Listed in the CISA KEV catalogue - exploitation confirmed in the wild.
63%
chance of attack within 30 days
Type
CWE-787Out-of-bounds Write
Timeline
Published8 Oct 2021
Updated23 Oct 2026
First seen6 Mar 2026
Track software like this
Free during beta