PT-2025-34809 · Google +1 · Google Chrome +1

Published

2025-08-11

·

Updated

2025-10-13

·

CVE-2025-9478

CVSS v2.0
10
VectorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 139.0.7258.154
Description A use-after-free issue exists in ANGLE within Google Chrome. This flaw allows a remote attacker to potentially exploit heap corruption through a crafted HTML page. The vulnerability was discovered by Google’s AI agent, Big Sleep.
Recommendations Update Google Chrome to version 139.0.7258.154 or later.

Fix

RCE

Use After Free

Weakness Enumeration

CWE-416

Related Identifiers

BDU:2025-10882
CVE-2025-9478
DSA-5988-1

Affected Products

Debian
Google Chrome