SB2025012292 - Multiple vulnerabilities in Google Chrome

Description

This security bulletin contains information about 2 secuirty vulnerabilities.

1) Buffer overflow (CVE-ID: CVE-2025-0611)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error in V8 in Google Chrome. A remote attacker can trick the victim to visit a specially crafted webpage, trigger memory corruption and execute arbitrary code on the system.

2) Buffer overflow (CVE-ID: CVE-2025-0612)

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to a boundary error in V8 in Google Chrome. A remote attacker can trick the victim to visit a specially crafted webpage, trigger a stack-based buffer overflow and execute arbitrary code on the system.

Remediation

Install update from vendor's website.

References

• https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_22.html
• https://crbug.com/386143468
• https://crbug.com/385155406