What is CVE-2022-4135?

CVE-2022-4135 is a heap buffer overflow vulnerability in Google Chromium GPU that allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.

Which web browsers are affected by CVE-2022-4135?

Web browsers that utilize Chromium such as Google Chrome and Microsoft Edge are affected by CVE-2022-4135.

How can a remote attacker exploit CVE-2022-4135?

A remote attacker who has compromised the renderer process can exploit CVE-2022-4135 using a crafted HTML page.

How severe is CVE-2022-4135?

The severity of CVE-2022-4135 is high as it allows a potential sandbox escape and can be exploited remotely.

Are there any official references for CVE-2022-4135?

Yes, you can find more information about CVE-2022-4135 in the official Google Chrome Release blog.

Vulnerability/
CVE-2022-4135

Exploited

critical

9.6

CWE

787 119

22/11/2022

25/11/2022

3/8/2024

CVE-2022-4135: Heap buffer overflow in GPU

First published: Tue Nov 22 2022(Updated: )

Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.

Credit: chrome-cve-admin@google.com Clement Lecigne Google's Threat Analysis Group chrome-cve-admin@google.com

Affected Software	Affected Version	How to fix
Google Chrome	<107.0.5304.121	107.0.5304.121
Google Chromium GPU
Google Chrome	<107.0.5304.121
Microsoft Edge	<107.0.1418.62
Microsoft Edge Chromium	<107.0.5304.150

Never miss a vulnerability like this again

Reference Links

Parent vulnerabilities

(Appears in the following advisories)

6128717415731122967

Frequently Asked Questions

What is CVE-2022-4135?
CVE-2022-4135 is a heap buffer overflow vulnerability in Google Chromium GPU that allows a remote attacker to potentially perform a sandbox escape via a crafted HTML page.
Which web browsers are affected by CVE-2022-4135?
Web browsers that utilize Chromium such as Google Chrome and Microsoft Edge are affected by CVE-2022-4135.
How can a remote attacker exploit CVE-2022-4135?
A remote attacker who has compromised the renderer process can exploit CVE-2022-4135 using a crafted HTML page.
How severe is CVE-2022-4135?
The severity of CVE-2022-4135 is high as it allows a potential sandbox escape and can be exploited remotely.
Are there any official references for CVE-2022-4135?
Yes, you can find more information about CVE-2022-4135 in the official Google Chrome Release blog.

agent/type
agent/first-publish-date
agent/severity
exploited/true
collector/chrome-releases
agent/software-canonical-lookup-request
agent/software-canonical-lookup
agent/weakness
agent/description
agent/author
collector/nvd-index
agent/title
agent/softwarecombine
collector/nvd-api
source/NVD
collector/mitre-cve
source/MITRE
agent/last-modified-date
agent/event
collector/cisa-known-exploited
source/CISA
agent/tags
agent/references
collector/nvd-cve
vendor/google
canonical/google chrome
vendor/microsoft
canonical/microsoft edge
canonical/microsoft edge chromium
canonical/google chromium gpu

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.