CVE-2022-1364: Type Confusion in V8
Google Chromium V8 Engine contains a type confusion vulnerability that allows a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Type confusion in V8 Turbofan in Google Chrome prior to 100.0.4896.127 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade to a fixed release to a version that resolves this vulnerability.
Fixed in 100.0.4896.127 - Upgrade
Upgrade
alpine/chromiumto a version that resolves this vulnerability.Fixed in 100.0.4896.127-r0 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 100.0.4896.127-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Frequently Asked Questions
What is the severity of CVE-2022-1364?
The severity of CVE-2022-1364 is high with a CVSS score of 8.8.
How does CVE-2022-1364 affect Google Chromium V8 Engine?
CVE-2022-1364 affects Google Chromium V8 Engine versions prior to 100.0.4896.127.
What is the potential impact of CVE-2022-1364?
CVE-2022-1364 can potentially allow a remote attacker to exploit heap corruption via a crafted HTML page.
How can I fix CVE-2022-1364?
To fix CVE-2022-1364, update Google Chrome to version 100.0.4896.127 or later.
Where can I find more information about CVE-2022-1364?
You can find more information about CVE-2022-1364 at the following references: [1](https://chromereleases.googleblog.com/2022/04/stable-channel-update-for-desktop_14.html), [2](https://crbug.com/1315901), [3](https://security.gentoo.org/glsa/202208-25).