Buffer overflow in Google Chromium - CVE-2025-0611
Published: January 22, 2025 / Updated: January 28, 2025
Vulnerability identifier: #VU103243
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2025-0611
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Affected software:
Google Chromium
Microsoft Edge
Google Chrome
Prisma Access Browser
Debian Linux
Fedora
Chrome OS
chromium
chromium (Debian package)
Google Chromium
Microsoft Edge
Google Chrome
Prisma Access Browser
Debian Linux
Fedora
Chrome OS
chromium
chromium (Debian package)
Detailed vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to a boundary error in V8 in Google Chrome. A remote attacker can trick the victim to visit a specially crafted webpage, trigger memory corruption and execute arbitrary code on the system.
How to mitigate CVE-2025-0611
Install update from vendor's website.