Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. This vulnerability has been classified with a high severity rating by Chromium security.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.8 | CVE-2025-9132 |
Exploitation
To exploit this vulnerability, an attacker can craft a malicious HTML page that, when opened by a user in an affected version of Google Chrome, can lead to heap corruption. This requires the user to interact with the page, making user interaction a necessary component of the exploit.
Affected Products
- Google Chrome versions prior to 139.0.7258.138: Vulnerable to heap corruption due to out of bounds write in V8.
Mitigation
Users are advised to update their Google Chrome browser to version 139.0.7258.138 or later to mitigate this vulnerability. Regular updates help protect against known vulnerabilities and enhance overall security.