Security update for chromium

Chromium 128.0.6613.137 fixes four distinct vulnerabilities: CVE-2024-8636 is a heap buffer overflow in the Skia graphics library; CVE-2024-8637 is a use-after-free vulnerability in the Media Router component; CVE-2024-8638 is a type confusion vulnerability in the V8 JavaScript engine; and CVE-2024-8639 is a use-after-free vulnerability in the Autofill feature. These issues could lead to memory corruption and potentially allow an attacker to execute arbitrary code or cause denial of service. No CVSS scores are provided, but the severity is assessed as high by the source. No known exploits in the wild have been reported at the time of this update.

The vulnerabilities fixed in this update could allow attackers to exploit memory corruption bugs such as heap buffer overflow, use-after-free, and type confusion, potentially leading to arbitrary code execution or denial of service. The high severity indicates significant risk if these issues are exploited, but no active exploitation has been reported.

Apply the Chromium update to version 128.0.6613.137 or later as released on 2024-09-10 to remediate these vulnerabilities. No additional mitigation guidance is provided, and no known exploits are reported, so timely patching is the recommended action.