CVE-2025-0437

Description

Out of bounds read in Metrics in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

References

https://issues.chromium.org/issues/378623799

https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-1669

https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html

Details

Source: Mitre, NVD

Named Vulnerability: GHSA-4353-vp82-4qq4

Risk Information

CVSS v2

CVSS v3

EPSS