CVE-2022-2587 — Out-of-bounds Write in Google Chrome

CWE-787 — Out-of-bounds Write4 documents4 sources
Severity
9.8CRITICALNVD
EPSS
0.7%
top 29.03%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
3
Google ChromeDebian ChromiumGoogle Chrome Chrome
Timeline
PublishedAug 12
Latest updateAug 13

Description

Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted audio metadata.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HExploitability: 3.9 | Impact: 5.9

Affected Packages4 packages

▶CVEListV5google/chromeunspecified — 102.0.5005.125
▶NVDgoogle/chrome< 102.0.5005.125

🔴Vulnerability Details

1
GHSA
GHSA-r6m5-2jxc-mqrv: Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102↗2022-08-13
▶

📋Vendor Advisories

2
Chrome
Stable Channel Update for ChromeOS: CVE-2022-2587↗2022-06-15
▶
Debian
CVE-2022-2587: chromium - Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prio...↗2022
▶