CVE-2025-11211CWE-125

CVE-2025-11211

High · published November 7, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
30.4
In the wild
Unconfirmed
What it is

⚡ An unexpected out-of-bounds read in Google Chrome could allow attackers to exploit memory access vulnerabilities through carefully crafted HTML pages! Think of it like a restaurant where the waiter accidentally serves a dish intended for another table. If they’re not careful, you could end up with something spicy that wasn’t meant for you — and it might just leave a bad taste in your mouth! An attacker could potentially access sensitive memory contents, leading to data leaks or crashes, which is definitely a recipe for disaster. If exploited, this could compromise user privacy or even stability of the browser, making it a serious concern for anyone using an affected version.

Put simply

Think of it like a restaurant where the waiter accidentally serves a dish intended for another table. If they’re not careful, you could end up with something spicy that wasn’t meant for you — and it might just leave a bad taste in your mouth! This vulnerability allows out-of-bounds memory access due to improper handling in the Media component of Google Chrome, specifically prior to version 141.0.7390.54.

What to do

An attacker could potentially access sensitive memory contents, leading to data leaks or crashes, which is definitely a recipe for disaster. If exploited, this could compromise user privacy or even stability of the browser, making it a serious concern for anyone using an affected version. Update Google Chrome to version 141.0.7390.54 or later immediately. Ensure that users are encouraged to keep their browsers updated to avoid falling victim to similar vulnerabilities in the future. You've got this! Keeping your software updated is a simple step toward a safer internet experience. 🛡️

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00376 · 30.4th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2025-11-07T03:15Z
Affected products (1)
ProductVersionsFixed in
google/chrome< 141.0.7390.54141.0.7390.54
References (2)
EPSS history
Timeline
  • 06 NOV 22:08Z
    Out of bounds read in Media in Google Chrome prior to 141.0.7390.54 allowed a remote attacker to potentially perform out of bounds memory access via a crafted…
    cvelistv5