Buffer overflow in Google Chromium - CVE-2025-0612
Published: January 22, 2025 / Updated: January 28, 2025
Vulnerability identifier: #VU103244
CSH Severity: High
CVSS v4.0: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Amber
CVE-ID: CVE-2025-0612
CWE-ID: CWE-119
Exploitation vector: Remote access
Exploit availability:
No public exploit available
Affected software:
Google Chromium
Microsoft Edge
Google Chrome
Prisma Access Browser
Debian Linux
Fedora
chromium
chromium (Debian package)
Google Chromium
Microsoft Edge
Google Chrome
Prisma Access Browser
Debian Linux
Fedora
chromium
chromium (Debian package)
Detailed vulnerability description
The vulnerability allows a remote attacker to compromise the affected system.
The vulnerability exists due to a boundary error in V8 in Google Chrome. A remote attacker can trick the victim to visit a specially crafted webpage, trigger a stack-based buffer overflow and execute arbitrary code on the system.
How to mitigate CVE-2025-0612
Install update from vendor's website.