CVE-2022-3195: Out of bounds write in Storage

Q: What is the severity of CVE-2022-3195?

CVE-2022-3195 has a security severity rating of High.

Q: How do I fix CVE-2022-3195?

To fix CVE-2022-3195, update Google Chrome to version 105.0.5195.125 or later.

Q: Which software is affected by CVE-2022-3195?

CVE-2022-3195 affects Google Chrome prior to version 105.0.5195.125 and Fedora 37.

Q: What type of vulnerability is CVE-2022-3195?

CVE-2022-3195 is classified as an out of bounds write vulnerability.

Q: Can CVE-2022-3195 be exploited remotely?

Yes, CVE-2022-3195 can be exploited remotely through a crafted HTML page.

Published Aug 31, 2022

Updated

Out of bounds write in Storage in Google Chrome prior to 105.0.5195.125 allowed a remote attacker to perform an out of bounds memory write via a crafted HTML page. (Chromium security severity: High)

Credit

Ziling Chen(360 Vulnerability Research Institute), Nan Wang@@eternalsakura13(360 Vulnerability Research Institute)

Affected Software

7 affected componentsFixes available

Google Chrome<105.0.5195.125

105.0.5195.125

Google Chrome<105.0.5195.125

Fedoraproject Fedora=37

debian/chromium<105.0.5195.125-1

105.0.5195.125-1

debian/chromium<105.0.5195.125-1

105.0.5195.125-1

debian/chromium<105.0.5195.125-1

105.0.5195.125-1

debian/chromium

150.0.7871.100-1~deb12u1156.0.8078.79-1~deb12u1150.0.7871.181-1~deb13u1156.0.8078.79-1~deb13u1156.0.8078.79-1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade Google Chrome (Trace Event) to a version that resolves this vulnerability.
Fixed in 105.0.5195.125
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 105.0.5195.125-1
Upgrade
Upgrade debian/chromium to a version that resolves this vulnerability.
Fixed in 150.0.7871.100-1~deb12u1Fixed in 156.0.8078.79-1~deb12u1Fixed in 150.0.7871.181-1~deb13u1Fixed in 156.0.8078.79-1~deb13u1Fixed in 156.0.8078.79-1

Event History

Aug 31, 2022

CVE Published

12:00 AM

Sep 26, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via OSV·04:15 PM

DescriptionSeverityAffected Software

Parent advisories

This vulnerability appears in the following advisories.

Peer vulnerabilities

Found alongside the following vulnerabilities.

Frequently Asked Questions

What is the severity of CVE-2022-3195?

CVE-2022-3195 has a security severity rating of High.

How do I fix CVE-2022-3195?

To fix CVE-2022-3195, update Google Chrome to version 105.0.5195.125 or later.

Which software is affected by CVE-2022-3195?

CVE-2022-3195 affects Google Chrome prior to version 105.0.5195.125 and Fedora 37.

What type of vulnerability is CVE-2022-3195?

CVE-2022-3195 is classified as an out of bounds write vulnerability.

Can CVE-2022-3195 be exploited remotely?

Yes, CVE-2022-3195 can be exploited remotely through a crafted HTML page.

CVE-2022-3195: Out of bounds write in Storage

Credit

Affected Software

Remediation

Event History

Parent advisories

Peer vulnerabilities

Frequently Asked Questions

What is the severity of CVE-2022-3195?

How do I fix CVE-2022-3195?

Which software is affected by CVE-2022-3195?

What type of vulnerability is CVE-2022-3195?

Can CVE-2022-3195 be exploited remotely?

Company

Resources

Contact