PT-2025-45394 · Microsoft+4 · Edge+4

Published 2025-09-09 · Updated 2025-12-17 · CVE-2025-12725

Positive Technologies · (AI Summary)

CVSS v3.1

8.8

High

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Google Chrome (affected versions not specified)

Description A flaw exists in Google Chrome that could allow attackers to impact the system. The issue is an out-of-bounds write within the WebGPU component. Microsoft Edge, being Chromium-based, is also affected as it incorporates Chromium.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

ALT-PU-2025-14702

BDU:2025-13846

CVE-2025-12725

DSA-6050-1

OPENSUSE-SU-2025:15720-1

OPENSUSE-SU-2025:20037-1

Affected Products

Alt Linux

Debian

Google Chrome

Edge

Red Os

References · 29

• https://nvd.nist.gov/vuln/detail/CVE-2025-12725 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:20037-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-12725 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15720-1 · Vendor Advisory
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://osv.dev/vulnerability/DSA-6050-1 · Vendor Advisory
• https://chromereleases.googleblog.com/2025/11/stable-channel-update-for-desktop.html · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-13846 · Security Note
• https://security-tracker.debian.org/tracker/CVE-2025-12725 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-12725 · Vendor Advisory
• https://twitter.com/Cezar_H_Linux/status/1988570581042602110 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1988029882387812653 · Twitter Post
• https://suse.com/security/cve/CVE-2025-12725 · Note
• https://crbug.com/443906252 · Note
• https://suse.com/security/cve/CVE-2025-12727 · Note