FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

qt6-webengine -- Multiple vulnerabilities

Affected packages
	qt5-webengine	<	5.15.16.p5_5
	qt6-webengine	<	6.6.1_4

Details

VuXML ID	bbcb1584-c068-11ee-bdd6-4ccc6adda413
Discovery	2024-01-30
Entry	2024-01-31

Qt qtwebengine-chromium repo reports:

Backports for 3 security bugs in Chromium:

[1505080] High CVE-2024-0807: Use after free in WebAudio

[1504936] Critical CVE-2024-0808: Integer underflow in WebUI

[1496250] Medium CVE-2024-0810: Insufficient policy enforcement in DevTools

[source]

References

CVE Name	CVE-2024-0807
CVE Name	CVE-2024-0808
CVE Name	CVE-2024-0810
URL	https://code.qt.io/cgit/qt/qtwebengine-chromium.git/log/?h=112-based