Product:
Chrome
Summary
Heap buffer overflow in ANGLE in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via malicious network traffic. The vulnerability has a high severity rating and can lead to significant impacts on confidentiality, integrity, and availability.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-10502 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted network traffic to a vulnerable instance of Google Chrome. If the user interacts with the malicious content, it may lead to heap corruption, allowing the attacker to execute arbitrary code or cause a denial of service.
Affected Products
- Google Chrome: Affected versions prior to 140.0.7339.185 are vulnerable to heap buffer overflow issues.
Mitigation
Users are advised to update Google Chrome to the latest version to mitigate this vulnerability. Regularly updating software can help protect against known vulnerabilities and exploits.