CVE-2021-30628: 
vulnerability analysis and mitigation

CVE-2021-30628 is a stack buffer overflow vulnerability discovered in ANGLE (Almost Native Graphics Layer Engine) component of Google Chrome versions prior to 93.0.4577.82. The vulnerability was reported by Jaehun Jeong(@n3sk) of Theori on August 18, 2021, and was publicly disclosed on September 13, 2021 (Chrome Release).

The vulnerability is classified as a stack buffer overflow in the ANGLE component of Google Chrome. It has been assigned a CVSS v3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H. The vulnerability allows a remote attacker to potentially exploit stack corruption through a specially crafted HTML page (NVD).

The vulnerability could allow an attacker to potentially exploit stack corruption, which could lead to arbitrary code execution within the context of the browser. Given the high CVSS score and the critical nature of the ANGLE component in Chrome's graphics pipeline, successful exploitation could compromise the integrity and security of the affected system (NVD).

Google released a fix for this vulnerability in Chrome version 93.0.4577.82. Users are advised to update their Chrome browser to this version or later to mitigate the vulnerability. The fix was also incorporated into subsequent releases of Fedora's Chromium packages (Fedora Update).