medium5.4
CVE-2025-5283
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.
Impact
Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Chrome | before 137.0.7151.55 |
Weakness classification
References
- NVD record
- CVE.org record
- https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html
- https://issues.chromium.org/issues/419467315
- https://lists.debian.org/debian-lts-announce/2025/05/msg00043.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00046.html
- https://lists.debian.org/debian-lts-announce/2025/05/msg00052.html