REDHAT-BUG-2485185: Buffer Overflow
Heap buffer overflow in ANGLE in Google Chrome on Android prior to 149.0.7827.53 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
Affected Software
Event History
Frequently Asked Questions
Who is exposed to this issue?
The affected product is Google Chrome for Android prior to version 149.0.7827.53. Exploitation is relevant when an attacker has already compromised the Chrome renderer process.
What does an attacker need to exploit the vulnerability?
The attacker needs a compromised renderer process and can then use a crafted HTML page to potentially escape Chrome's sandbox. The provided information does not indicate that the flaw alone provides initial renderer compromise.
How can I determine whether a device is affected?
Check the installed Google Chrome for Android version. Versions earlier than 149.0.7827.53 are affected according to the available information.