CVE-2022-0797: Out of bounds memory access in Mojo
Published Dec 21, 2021
·Updated
Out of bounds memory access in Mojo in Google Chrome prior to 99.0.4844.51 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page.
Credit
Sergei Glazunov(Google Project Zero)
Affected Software
5 affected componentsFixes available
Google Chrome<99.0.4844.51
99.0.4844.51
Google Chrome<99.0.4844.51
macOS
Linux Linux Kernel
Microsoft Windows
Event History
Dec 21, 2021
CVE Published
12:00 AM
Apr 5, 2022
CVE Published
via MITRE·12:25 AM
Data Sourced
via MITRE·12:25 AM
DescriptionWeakness
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
1
What is the severity of CVE-2022-0797?
CVE-2022-0797 is classified as a high severity vulnerability due to the potential for remote code execution.
2
What type of exploit is associated with CVE-2022-0797?
CVE-2022-0797 involves an out-of-bounds memory access, allowing attackers to manipulate memory through a crafted HTML page.
3
How do I fix CVE-2022-0797?
To fix CVE-2022-0797, update Google Chrome to version 99.0.4844.51 or a later release.
4
Which versions of Google Chrome are affected by CVE-2022-0797?
CVE-2022-0797 affects all versions of Google Chrome prior to version 99.0.4844.51.
5
What platforms are impacted by CVE-2022-0797?
CVE-2022-0797 primarily impacts Google Chrome on desktop systems, including Windows, macOS, and Linux.