CVE-2022-4135: Heap buffer overflow in GPU
Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
Other sources
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Credit
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Google Chrome (Trace Event)to a version that resolves this vulnerability.Fixed in 107.0.5304.121
Event History
Frequently Asked Questions
What is CVE-2022-4135?
CVE-2022-4135 is a heap buffer overflow vulnerability in Google Chromium GPU that allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Which web browsers are affected by CVE-2022-4135?
Web browsers that utilize Chromium such as Google Chrome and Microsoft Edge are affected by CVE-2022-4135.
How can a remote attacker exploit CVE-2022-4135?
A remote attacker who has compromised the renderer process can exploit CVE-2022-4135 using a crafted HTML page.
How severe is CVE-2022-4135?
The severity of CVE-2022-4135 is high as it allows a potential sandbox escape and can be exploited remotely.
Are there any official references for CVE-2022-4135?
Yes, you can find more information about CVE-2022-4135 in the official Google Chrome Release blog.