CVE-2022-2613: Use after free in Input

Q: What is CVE-2022-2613?

CVE-2022-2613 is a vulnerability found in Google Chrome on Chrome OS prior to version 104.0.5112.79 that allows a remote attacker to potentially exploit heap corruption.

Q: How severe is CVE-2022-2613?

CVE-2022-2613 has a severity score of 8.8, which is considered high.

Q: How can CVE-2022-2613 be exploited?

CVE-2022-2613 can be exploited by convincing a user to engage in specific user interactions, allowing a remote attacker to potentially exploit heap corruption through specific UI interactions.

Q: Which software versions are affected by CVE-2022-2613?

Google Chrome on Chrome OS versions prior to 104.0.5112.79 are affected by CVE-2022-2613.

Q: How can I fix CVE-2022-2613?

To fix CVE-2022-2613, you should update Google Chrome on Chrome OS to version 104.0.5112.79 or later.

Published May 13, 2022

Updated

Use after free in Input in Google Chrome on Chrome OS prior to 104.0.5112.79 allowed a remote attacker who convinced a user to enage in specific user interactions to potentially exploit heap corruption via specific UI interactions.

Credit

Piotr Tworek (Vewd)

Affected Software

8 affected componentsFixes available

Google Chrome<104.0.5112.79

104.0.5112.79

Google Chrome<104.0.5112.79

Google Chrome OS

Fedoraproject Fedora=37

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium<104.0.5112.79-1

104.0.5112.79-1

debian/chromium

150.0.7871.100-1~deb12u1156.0.8078.79-1~deb12u1150.0.7871.181-1~deb13u1156.0.8078.79-1~deb13u1156.0.8078.79-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 104.0.5112.79
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 104.0.5112.79-1
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1

Event History

May 13, 2022

CVE Published

12:00 AM

Aug 12, 2022

CVE Published

via MITRE·07:36 PM

Data Sourced

via MITRE·07:36 PM

DescriptionWeakness

Data Sourced

via OSV·08:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is CVE-2022-2613?

CVE-2022-2613 is a vulnerability found in Google Chrome on Chrome OS prior to version 104.0.5112.79 that allows a remote attacker to potentially exploit heap corruption.

How severe is CVE-2022-2613?

CVE-2022-2613 has a severity score of 8.8, which is considered high.

How can CVE-2022-2613 be exploited?

CVE-2022-2613 can be exploited by convincing a user to engage in specific user interactions, allowing a remote attacker to potentially exploit heap corruption through specific UI interactions.

Which software versions are affected by CVE-2022-2613?

Google Chrome on Chrome OS versions prior to 104.0.5112.79 are affected by CVE-2022-2613.

How can I fix CVE-2022-2613?

To fix CVE-2022-2613, you should update Google Chrome on Chrome OS to version 104.0.5112.79 or later.

CVE-2022-2613: Use after free in Input

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is CVE-2022-2613?

How severe is CVE-2022-2613?

How can CVE-2022-2613 be exploited?

Which software versions are affected by CVE-2022-2613?

How can I fix CVE-2022-2613?

Company

Resources

Contact