CVE-2022-2161: Use after free in WebApp Provider

Reference Links

• https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html (Advisory)
• https://crbug.com/1330289
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/
• https://security.gentoo.org/glsa/202208-25
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/

Parent vulnerabilities

(Appears in the following advisories)

• 8599707099132100813

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-2156
• CVE-2022-2157
• CVE-2022-4916
• CVE-2022-2158
• CVE-2022-2415
• CVE-2022-2160
• CVE-2022-2162
• CVE-2022-4917
• CVE-2022-2164
• CVE-2022-2165

Frequently Asked Questions

• What is the severity of CVE-2022-2161?

  CVE-2022-2161 is classified as a high-severity vulnerability due to its potential to exploit heap corruption.

• How do I fix CVE-2022-2161?

  To fix CVE-2022-2161, update your Google Chrome browser to version 103.0.5060.53 or later.

• What types of systems are affected by CVE-2022-2161?

  CVE-2022-2161 affects Google Chrome versions prior to 103.0.5060.53 and Fedora versions 35 and 36.

• Can CVE-2022-2161 be exploited remotely?

  Yes, CVE-2022-2161 can be exploited remotely if the user engages in specific interactions.

• What kind of interactions trigger the vulnerability in CVE-2022-2161?

  CVE-2022-2161 can be triggered by specific UI interactions within the affected versions of Google Chrome.