CVE-2024-11920: 
Google Chrome vulnerability analysis and mitigation

Inappropriate implementation in Dawn in Google Chrome on Mac prior to 130.0.6723.92 allowed a remote attacker to perform out of bounds memory access via a crafted HTML page. This vulnerability was reported by Apple Security Engineering and Architecture (SEAR) on October 7, 2024, and was assigned a High security severity by Chromium (Chrome Release).

The vulnerability is classified under CWE-787 (Out-of-bounds Write) and CWE-125 (Out-of-bounds Read) according to CISA-ADP. The vulnerability has been assigned a CVSS v3.1 Base Score of 4.3 (Medium) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L, indicating that it is network-accessible, requires low attack complexity, needs no privileges, but does require user interaction (Ubuntu CVE).

The vulnerability affects the availability of the system through out-of-bounds memory access, though there are no reported impacts on confidentiality or integrity. The issue specifically affects Google Chrome installations on Mac systems running versions prior to 130.0.6723.92 (NVD).

The vulnerability has been fixed in Google Chrome version 130.0.6723.92 for Mac. Users are advised to update their Chrome browsers to this version or later to mitigate the risk (Chrome Release).