← Back

CVE-2022-2294

nvd nist
Published: Jul 28, 2022Modified: Jun 17, 2026CISA KEV

JSON object

Loading...
8.8
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Exploitability: 2.8 / Impact: 5.9
Source: NVD

Description

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected (31)

Show all products
Google: Chrome · Fedoraproject: Extra Packages For Enterprise Linux, Fedora · Webkitgtk: Webkitgtk · Wpewebkit: Wpe Webkit · Apple: Ipados, Iphone Os, Mac Os X, Macos, Tvos, Watchos · Webrtc Project: Webrtc
Google
1 product
Chrome
Fedoraproject
2 products
Extra Packages For Enterprise Linux
Fedora
Webkitgtk
1 product
Webkitgtk
Wpewebkit
1 product
Wpe Webkit
Apple
6 products
Ipados
Iphone Os
Mac Os X
Macos
Tvos
Watchos
Webrtc Project
1 product
Webrtc
Configuration A
1 vulnerable
Vulnerable SoftwareAffected Versions
Chrome
Before 103.0.5060.114
Configuration B
3 vulnerable
Vulnerable SoftwareAffected Versions
Extra Packages For Enterprise Linux
Version 8.0
Fedoraproject
Fedora
Version 35
Fedora
Version 36
Configuration C
2 vulnerable
Vulnerable SoftwareAffected Versions
Webkitgtk
Before 2.36.5
Wpe Webkit
Before 2.36.5
Configuration D
24 vulnerable
Vulnerable SoftwareAffected Versions
Ipados
Before 15.6
Iphone Os
Before 15.6
Apple
Mac Os X
Before 10.15.7
Mac Os X
Version 10.15.7
Mac Os X
Version 10.15.7 security_update_2020-001
Mac Os X
Version 10.15.7 security_update_2020-005
Mac Os X
Version 10.15.7 security_update_2020-007
Mac Os X
Version 10.15.7 security_update_2020
Mac Os X
Version 10.15.7 security_update_2021-001
Mac Os X
Version 10.15.7 security_update_2021-002
Mac Os X
Version 10.15.7 security_update_2021-003
Mac Os X
Version 10.15.7 security_update_2021-004
Mac Os X
Version 10.15.7 security_update_2021-005
Mac Os X
Version 10.15.7 security_update_2021-006
Mac Os X
Version 10.15.7 security_update_2021-007
Mac Os X
Version 10.15.7 security_update_2021-008
Mac Os X
Version 10.15.7 security_update_2022-001
Mac Os X
Version 10.15.7 security_update_2022-002
Mac Os X
Version 10.15.7 security_update_2022-003
Mac Os X
Version 10.15.7 security_update_2022-004
Apple
Macos
Before 11.6.8
Macos
From 12.0 to 12.5
Tvos
Before 15.6
Watchos
Before 8.7
Configuration E
1 vulnerable
Vulnerable SoftwareAffected Versions
Webrtc
All versions

Related CWEs

CWE-787
Out-of-bounds Write
The product writes data past the end, or before the beginning, of the intended buffer.

References (17)

Source: chrome-cve-admin@google.com
Mailing ListThird Party Advisory
Source: chrome-cve-admin@google.com
Release NotesVendor Advisory
Source: chrome-cve-admin@google.com
Permissions Required
Source: chrome-cve-admin@google.com
Broken Link
Source: chrome-cve-admin@google.com
Broken Link
Source: chrome-cve-admin@google.com
Third Party Advisory
Source: chrome-cve-admin@google.com
Third Party Advisory
Source: chrome-cve-admin@google.com
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Mailing ListThird Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Release NotesVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Permissions Required
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Broken Link
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Third Party Advisory
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource

Timeline

No history available yet.