PT-2025-3981 · Google+4 · Google Chrome+4

Alan Goodman · Published 2025-01-22 · Updated 2025-07-02 · CVE-2025-0612

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 132.0.6834.110

Description The issue is related to out of bounds memory access in the V8 engine of Google Chrome, which can be exploited by a remote attacker using a specially crafted HTML page, potentially leading to heap corruption. This could allow the attacker to partially impact the availability of protected information.

Recommendations For versions prior to 132.0.6834.110, update to version 132.0.6834.110 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML pages until the update is applied.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2025-1986

ALT-PU-2025-3969

ALT-PU-2025-4366

ALT-PU-2025-7539

ALT-PU-2025-8547

AZL-56035

AZL-56052

BDU:2025-01351

CVE-2025-0612

DSA-5848-1

MGASA-2025-0029

OPENSUSE-SU-2025:0034-1

OPENSUSE-SU-2025:14698-1

Affected Products

Alt Linux

Astra Linux

Debian

Google Chrome

Red Os

References · 47

• https://osv.dev/vulnerability/AZL-56035 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-01351 · Security Note
• https://osv.dev/vulnerability/DSA-5848-1 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-0612 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:0034-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-0612 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-0612 · Security Note
• https://wiki.astralinux.ru/astra-linux-se47-bulletin-2025-0422SE47 · Vendor Advisory
• https://wiki.astralinux.ru/astra-linux-se16-bulletin-20251225SE16 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0029 · Vendor Advisory
• https://safe-surf.ru/specialists/bulletins-nkcki/717785 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14698-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-0612 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-56052 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_22.html · Vendor Advisory