Buffer overflow in Google Chromium - CVE-2025-0611

CSH
CYBERSECURITY HELP
Sign In REGISTER
 
Main Vulnerability Database Vulnerabilities #VU103243

Buffer overflow in Google Chromium - CVE-2025-0611

Published: January 22, 2025 / Updated: January 28, 2025


Vulnerability identifier: #VU103243
CSH Severity: High
CVSS v4: 8.6 [CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N]
CVE-ID: CVE-2025-0611
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability: No public exploit available

Vulnerability details

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error in V8 in Google Chrome. A remote attacker can trick the victim to visit a specially crafted webpage, trigger memory corruption and execute arbitrary code on the system.


Affected software

Google Chromium
Microsoft Edge
Google Chrome
Prisma Access Browser
Gentoo Linux
Debian Linux
Fedora
Chrome OS
www-client/opera
chromium
chromium (Debian package)
www-client/microsoft-edge
www-client/chromium
www-client/google-chrome

How to mitigate CVE-2025-0611

Install update from vendor's website.

Google Chromium - update to 132.0.6834.110
Microsoft Edge - update to 132.0.2957.127
Google Chrome - update to 132.0.6834.110
www-client/opera - update to 120.0.5543.8
Chrome OS - update to 126.0.6478.265
chromium - addressed in versions 132.0.6834.110-1.el8, 132.0.6834.110-1.el9, 132.0.6834.110-1.el10_0, 132.0.6834.110-1.fc40, 132.0.6834.110-1.fc41
chromium (Debian package) - update to 132.0.6834.110-1~deb12u1
Prisma Access Browser - update to 133.8.10.54
www-client/microsoft-edge - update to 135.0.3179.85
www-client/chromium - update to 135.0.7049.95
www-client/google-chrome - update to 135.0.7049.95

External References

Related Security Bulletins