CVE-2025-0438: Stack buffer overflow in Tracing

Reference Links

• https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html
• https://issues.chromium.org/issues/384186539
• https://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-0438 (Advisory)
• https://chromereleases.googleblog.com/2025/02/long-term-support-channel-update-for.html (Advisory)

Parent vulnerabilities

(Appears in the following advisories)

• 2259306148728772797

Peer vulnerabilities

(Found alongside the following vulnerabilities)

• CVE-2025-0437

Frequently Asked Questions

• What is the severity of CVE-2025-0438?

  CVE-2025-0438 has a high severity rating due to the potential for stack buffer overflow vulnerabilities.

• How do I fix CVE-2025-0438?

  To fix CVE-2025-0438, ensure that you update Microsoft Edge to version 132.0.2957.115 or higher.

• Which versions of Microsoft Edge are affected by CVE-2025-0438?

  CVE-2025-0438 affects Microsoft Edge versions before 132.0.2957.115.

• What is the nature of the vulnerability described in CVE-2025-0438?

  CVE-2025-0438 is a stack buffer overflow vulnerability that can potentially allow attackers to execute arbitrary code.

• Has CVE-2025-0438 been addressed in Chromium?

  Yes, Chromium has addressed CVE-2025-0438, and the updates are incorporated into Microsoft Edge (Chromium-based).