PT-2025-9742 · Google+3 · Google Chrome+3

Alesandro Ortiz · Published 2025-03-04 · Updated 2025-04-03 · CVE-2025-1922

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 134.0.6998.35

Description The issue is related to an inappropriate implementation in Selection in Google Chrome on Android, allowing a remote attacker to perform UI spoofing via a crafted HTML page if the user engages in specific UI gestures. The severity of this issue is classified as Low by Chromium.

Recommendations For Google Chrome versions prior to 134.0.6998.35, update to version 134.0.6998.35 or later to resolve the issue. As a temporary workaround, consider avoiding engagement in specific UI gestures that could be exploited by a crafted HTML page.

Exploit

Fix

UI Misrepresentation of Critical Information

Weakness Enumeration

CWE-451

Related Identifiers

ALT-PU-2025-4164

ALT-PU-2025-4366

BDU:2025-02669

CVE-2025-1922

DSA-5875-1

MGASA-2025-0091

OPENSUSE-SU-2025:0084-1

OPENSUSE-SU-2025:14854-1

Affected Products

Alt Linux

Debian

Google Chrome

Red Os

References · 65

• 🔥 https://github.com/ading2210/CVE-2024-6778-POC · Exploit
• 🔥 https://github.com/bi-zone/CVE-2024-7965 · Exploit
• 🔥 https://github.com/XiaomingX/cve-2024-7965-poc · Exploit
• 🔥 https://github.com/r00tjunip3r1/POC-CVE-2024-6778 · Exploit
• https://osv.dev/vulnerability/DSA-5875-1 · Vendor Advisory
• https://osv.dev/vulnerability/MGASA-2025-0091 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-1922 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2025-1922 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-1922 · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:0084-1 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-02669 · Security Note
• http://repo.red-soft.ru/redos/7.3c/x86_64/updates · Vendor Advisory
• https://advisories.mageia.org/MGASA-2025-0091.html · Security Note
• https://osv.dev/vulnerability/openSUSE-SU-2025:14854-1 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2025-1922 · Vendor Advisory