CVEvulnerability
CVE-2025-1122
6.7 MEDIUM
Official page ↗
- Status
- Analyzed
- Published
- 2025-04-15
- Last modified
- 2026-06-17
- Assigner
- 7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
- CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
- 6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-787
Description
Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and
Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.
Affected configurations
• google chrome 122.0.6261.132
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- https://issues.chromium.org/issues/b/324336238 Broken Link
- https://issuetracker.google.com/issues/324336238 Exploit, Issue Tracking