GitHub Advisoryadvisory · npm

GHSA-995f-9x5r-2rcj Heap buffer overflow in GPU

CRITICAL Published 2022-11-25 Modified 2022-11-28 Official page ↗
Aliases
CVE-2022-4135
Ecosystem
npm
Packages
electron
Severity
Critical
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Weaknesses
CWE-787
Reviewed
2022-11-28

Affected packages

• npm electron: >= 19.0.0, < 19.1.8 → fixed in 19.1.8

Description

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

Related

Alias · CVE (1)

  • CVE-2022-4135 Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to… vulnerability

Weakness · CWE (1)

  • CWE-787 Out-of-bounds Write weakness

References