EUVD-2025-16695
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Lifecycle Timeline
6Description
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Analysis
Chrome's V8 JavaScript engine contains an out-of-bounds read and write vulnerability (CVE-2025-5419, CVSS 8.8) enabling remote heap corruption through crafted HTML pages. KEV-listed with EPSS 3.0% and public PoC, this vulnerability provides both read and write primitives in V8's heap, making it highly reliable for exploitation.
Technical Context
The vulnerability provides both out-of-bounds read and write capabilities in V8's heap, which is particularly valuable for exploitation. The read primitive allows the attacker to leak memory layout information (defeating ASLR), while the write primitive enables corruption of adjacent objects. Combined, these provide a reliable exploitation path that is more stable than typical single-primitive vulnerabilities.
Affected Products
['Google Chrome prior to 137.0.7151.68', 'All Chromium-based browsers']
Remediation
Update Chrome to 137.0.7151.68+. Update all Chromium-based browsers. Enable auto-updates organization-wide.
Priority Score
Vendor Status
Ubuntu
Priority: Medium| Release | Status | Version |
|---|---|---|
| jammy | not-affected | code not present |
| noble | not-affected | code not present |
| oracular | not-affected | code not present |
| plucky | not-affected | code not present |
| upstream | released | - |
Debian
| Release | Status | Fixed Version | Urgency |
|---|---|---|---|
| bullseye (security), bullseye | vulnerable | 120.0.6099.224-1~deb11u1 | - |
| bookworm | fixed | 137.0.7151.68-1~deb12u1 | - |
| bookworm (security) | fixed | 146.0.7680.71-1~deb12u1 | - |
| trixie | fixed | 145.0.7632.159-1~deb13u1 | - |
| trixie (security) | fixed | 146.0.7680.71-1~deb13u1 | - |
| forky, sid | fixed | 146.0.7680.71-1 | - |
| bullseye | fixed | (unfixed) | end-of-life |
| (unstable) | fixed | 137.0.7151.68-1 | - |
Share
External POC / Exploit Code
Leaving vuln.today