~ / search / GHSA-995f-9x5r-2rcj

GHSA-995f-9x5r-2rcj

Heap buffer overflow in GPU

Source: GitHub Advisory Database (reviewed) Critical CVE-2022-4135

Packages

EcosystemPackageAffectedFixed in
npm electron >= 19.0.0, < 19.1.8 19.1.8

Details

As written in the advisory (Markdown source, shown as plain text).

Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)

References

External links from the advisory. They lead to third-party sites.