CVE-2022-2294KEV · OVERDUECWE-787

WebRTC Heap Buffer Overflow Vulnerability

High · published July 28, 2022

Patch now

Confirmed exploited, and the score agrees

CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.

1499
days past CISA
deadline
CVSS v3.1
8.8
EPSS
71%
Percentile
99.4
In the wild
Confirmed
What it is

🚨 A crafty crafted HTML page can trigger a heap buffer overflow in WebRTC, making Google Chrome versions before 103.0.5060.114 easy prey for attackers! 🔥 Think of it like a waiter who serves a dish that has more ingredients than the plate can hold — eventually, it overflows and creates a huge mess in the kitchen! 🍽️ An attacker could exploit this overflow to corrupt the memory heap, potentially executing arbitrary code on your system. This means they could gain control and do anything from stealing data to spreading malware — yikes! ⚡

Put simply

Think of it like a waiter who serves a dish that has more ingredients than the plate can hold — eventually, it overflows and creates a huge mess in the kitchen! 🍽️ The vulnerability arises from a heap buffer overflow in WebRTC, which allows attackers to manipulate memory by sending specially crafted HTML content, leading to heap corruption and potential control over the affected system.

What to do

An attacker could exploit this overflow to corrupt the memory heap, potentially executing arbitrary code on your system. This means they could gain control and do anything from stealing data to spreading malware — yikes! ⚡ Update Google Chrome immediately to version 103.0.5060.114 or newer. Regularly check for security updates and consider enabling automatic updates to stay protected. 🛡️ You've got this! Stay vigilant and keep your browser updated to thwart those attackers! 🚀

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.70833 · 99.4th percentile
Weakness
CWE-787 · Out-of-bounds Write
Published
2022-07-28T06:15Z
KEV added
2022-08-25 · due 2022-09-15
Affected products (31)
ProductVersionsFixed in
google/chrome< 103.0.5060.114103.0.5060.114
fedoraproject/extra_packages_for_enterprise_linuxall versions—
fedoraproject/fedoraall versions—
fedoraproject/fedoraall versions—
webkitgtk/webkitgtk< 2.36.52.36.5
wpewebkit/wpe_webkit< 2.36.52.36.5
apple/ipados< 15.615.6
apple/iphone_os< 15.615.6
apple/mac_os_x< 10.15.710.15.7
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/mac_os_xall versions—
apple/macos< 11.6.811.6.8
apple/macos≥ 12.0, < 12.512.5
apple/tvos< 15.615.6
apple/watchos< 8.78.7
webrtc_project/webrtcall versions—
References (17)
http://www.openwall.com/lists/oss-security/2022/07/28/2 · [email protected]https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html · [email protected]https://crbug.com/1341043 · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ · [email protected]https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ · [email protected]https://security.gentoo.org/glsa/202208-35 · [email protected]https://security.gentoo.org/glsa/202208-39 · [email protected]https://security.gentoo.org/glsa/202311-11 · [email protected]http://www.openwall.com/lists/oss-security/2022/07/28/2 · af854a3a-2127-422b-91ae-364da2661108https://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html · af854a3a-2127-422b-91ae-364da2661108https://crbug.com/1341043 · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/ · af854a3a-2127-422b-91ae-364da2661108https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/ · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202208-35 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202208-39 · af854a3a-2127-422b-91ae-364da2661108https://security.gentoo.org/glsa/202311-11 · af854a3a-2127-422b-91ae-364da2661108https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2022-2294 · 134c704f-9b21-4f2e-91b3-4a467353bcc0
EPSS history
Timeline
  • 25 AUG 00:00Z
    Added to CISA KEV — remediate by Sep 15
    kev
  • 28 JUL 00:00Z
    Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML…
    cvelistv5