CVE-2022-4135

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Published: Nov 25, 2022
Updated: Jun 29, 2024
CVE: CVE-2022-4135
GHSA: GHSA-995f-9x5r-2rcj
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.6
AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H

CWEs:

CWE-787

Affected Software
References

Software	From	Fixed in
google / chrome	-	107.0.5304.121
microsoft / edge	-	107.0.1418.62
microsoft / edge_chromium	-	107.0.5304.150
electron	19.0.0	19.1.8

https://chromereleases.googleblog.com/2022/11/stable-channel-update-for-desktop_24.html
https://crbug.com/1392715
https://github.com/electron/electron/pull/36444
https://github.com/electron/electron/pull/36447
https://security.gentoo.org/glsa/202305-10

Vulnerability Database

CVE-2022-4135

Deep Security Visibility Without the Complexity