CVEvulnerability

CVE-2025-1292

6.7 MEDIUM Published 2025-04-15 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-04-15
Last modified
2026-06-17
Assigner
7f6e188d-c52a-4a19-8674-3c3fa7d1fc7f
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
6.7 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Weaknesses
CWE-787

Description

Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 122.0.6261.132 stable on Cr50 Boards allows an attacker with root access to gain persistence and bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.

Affected configurations

• google chrome 122.0.6261.132

Related

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References