CVE-2022-3050: Heap buffer overflow in WebUI
Heap buffer overflow in WebUI in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user to engage in specific UI interactions to potentially exploit heap corruption via crafted UI interactions.
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 105.0.5195.52 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 105.0.5195.52-1 - Upgrade
Upgrade
debian/chromiumto a version that resolves this vulnerability.Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1
Event History
Peer vulnerabilities
Found alongside the following vulnerabilities.
Frequently Asked Questions
What is CVE-2022-3050?
CVE-2022-3050 is a heap buffer overflow vulnerability in the WebUI component of Google Chrome on Chrome OS prior to version 105.0.5195.52.
What is the severity of CVE-2022-3050?
CVE-2022-3050 has a severity rating of 8.8 (high).
What software is affected by CVE-2022-3050?
Google Chrome on Chrome OS versions prior to 105.0.5195.52 is affected.
How can CVE-2022-3050 be exploited?
CVE-2022-3050 can be potentially exploited by a remote attacker who convinces a user to engage in specific UI interactions.
Are there any references for CVE-2022-3050?
Yes, you can find references for CVE-2022-3050 at the following links: [Link 1](https://chromereleases.googleblog.com/2022/08/stable-channel-update-for-desktop_30.html), [Link 2](https://crbug.com/1337132), [Link 3](https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/T4NMJURTG5RO3TGD7ZMIQ6Z4ZZ3SAVYE/).