PT-2025-32956 · Google+4 · Google Chrome+4
Published
2025-08-12
·
Updated
2025-12-20
·
CVE-2025-8901
CVSS v2.0
10
High
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions:
Google Chrome versions prior to 139.0.7258.127
Description:
An out-of-bounds write issue exists in ANGLE within Google Chrome. A remote attacker could potentially perform out-of-bounds memory access through a specially crafted HTML page. The issue involves a lack of validation in a shader using an inout variable, allowing it to write beyond the memory limit set by MaxDrawBuffers when shader framebuffer fetch is enabled.
Recommendations:
Update Google Chrome to version 139.0.7258.127 or later.
Fix
Memory Corruption
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Alt Linux
Astra Linux
Debian
Google Chrome
Red Os