Out-of-bounds Read Affecting chromium package, versions [,137.0.7151.69)
Threat Intelligence
Snyk has reported that there have been attempts or successful attacks targeting this vulnerability.
Do your applications use this vulnerable package?
In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.
Test your applications- Snyk IDSNYK-UNMANAGED-CHROMIUM-10301107
- published4 Jun 2025
- disclosed3 Jun 2025
- creditClement Lecigne, Benoît Sevens
Introduced: 3 Jun 2025
NewCVE-2025-5419 (opens in a new tab)How to fix?
Upgrade chromium to version 137.0.7151.69 or higher.
Overview
Affected versions of this package are vulnerable to Out-of-bounds Read in V8. An attacker can exploit heap corruption by convincing a user to open a specially crafted HTML page.
Note:
For Windows and Linux users it is sufficient to upgrade to 137.0.7151.68 version of Chrome.
Chromium maintainers statement: Access to bug details and links may be kept restricted until a majority of users are updated with a fix. We will also retain restrictions if the bug exists in a third party library that other projects similarly depend on, but haven’t yet fixed.