CVE-2022-4916: Use after free in Media

Reference Links

• https://chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.html (Advisory)
• https://crbug.com/1317714
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/PQKT7EGDD2P3L7S3NXEDDRCPK4NNZNWJ/
• https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/YKLJ3B3D5BCVWE3QNP4N7HHF26OHD567/

Parent vulnerabilities

(Appears in the following advisories)

• 8599707099132100813

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2022-2156
• CVE-2022-2157
• CVE-2022-2158
• CVE-2022-2415
• CVE-2022-2160
• CVE-2022-2161
• CVE-2022-2162
• CVE-2022-4917
• CVE-2022-2164
• CVE-2022-2165

Frequently Asked Questions

• What is the severity of CVE-2022-4916?

  The severity of CVE-2022-4916 is classified as High.

• How do I fix CVE-2022-4916?

  To fix CVE-2022-4916, update Google Chrome to version 103.0.5060.53 or later.

• What type of vulnerability is CVE-2022-4916?

  CVE-2022-4916 is a Use After Free vulnerability in Media components of Google Chrome.

• Who is affected by CVE-2022-4916?

  Users of Google Chrome versions prior to 103.0.5060.53 are affected by CVE-2022-4916.

• What could attackers do with CVE-2022-4916?

  Attackers could exploit CVE-2022-4916 to perform arbitrary read/write operations via a crafted HTML page.