High · published July 28, 2022
CVSS calls it high at 8.8. It is confirmed in active exploitation. It sits in the 99.4th percentile for exploit probability.
🚨 A crafty crafted HTML page can trigger a heap buffer overflow in WebRTC, making Google Chrome versions before 103.0.5060.114 easy prey for attackers! 🔥 Think of it like a waiter who serves a dish that has more ingredients than the plate can hold — eventually, it overflows and creates a huge mess in the kitchen! 🍽️ An attacker could exploit this overflow to corrupt the memory heap, potentially executing arbitrary code on your system. This means they could gain control and do anything from stealing data to spreading malware — yikes! ⚡
Think of it like a waiter who serves a dish that has more ingredients than the plate can hold — eventually, it overflows and creates a huge mess in the kitchen! 🍽️ The vulnerability arises from a heap buffer overflow in WebRTC, which allows attackers to manipulate memory by sending specially crafted HTML content, leading to heap corruption and potential control over the affected system.
An attacker could exploit this overflow to corrupt the memory heap, potentially executing arbitrary code on your system. This means they could gain control and do anything from stealing data to spreading malware — yikes! ⚡ Update Google Chrome immediately to version 103.0.5060.114 or newer. Regularly check for security updates and consider enabling automatic updates to stay protected. 🛡️ You've got this! Stay vigilant and keep your browser updated to thwart those attackers! 🚀
| Product | Versions | Fixed in |
|---|---|---|
| google/chrome | < 103.0.5060.114 | 103.0.5060.114 |
| fedoraproject/extra_packages_for_enterprise_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| webkitgtk/webkitgtk | < 2.36.5 | 2.36.5 |
| wpewebkit/wpe_webkit | < 2.36.5 | 2.36.5 |
| apple/ipados | < 15.6 | 15.6 |
| apple/iphone_os | < 15.6 | 15.6 |
| apple/mac_os_x | < 10.15.7 | 10.15.7 |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/mac_os_x | all versions | — |
| apple/macos | < 11.6.8 | 11.6.8 |
| apple/macos | ≥ 12.0, < 12.5 | 12.5 |
| apple/tvos | < 15.6 | 15.6 |
| apple/watchos | < 8.7 | 8.7 |
| webrtc_project/webrtc | all versions | — |