CVE-2025-5419
CVE-2025-5419
In short
Google Chrome had a bug in its V8 engine that allowed attackers to read and write data outside intended memory boundaries through a specially crafted webpage, potentially crashing the browser or executing malicious code.
Technical detail
Out-of-bounds read/write vulnerability in V8 engine (CWE-125, CWE-787) exploitable via crafted HTML; requires user to visit malicious page; impacts heap integrity and may lead to arbitrary code execution or denial of service.
Summary generated and translated by AI from the official description.
Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected products
Google · Chromepublic PoCs found — 4
githubgithub.com/mistymntncop/CVE-2025-5419★ 95githubgithub.com/bjrjk/CVE-2025-5419★ 30githubgithub.com/itsShotgun/chrome_v8_cve_checker★ 2githubgithub.com/riemannj/CVE-2025-5419★ 0⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Want to know if your infrastructure is exposed to this?
Talk to TrueHacking →