Use After Free Affecting chromium package, versions [,134.0.6998.88)

Do your applications use this vulnerable package?

In a few clicks we can analyze your entire application and see what components are vulnerable in your application, and suggest you quick fixes.

Test your applications

Snyk Learn

Learn about Use After Free vulnerabilities in an interactive lesson.

Snyk IDSNYK-UNMANAGED-CHROMIUM-9396767
published11 Mar 2025
disclosed10 Mar 2025
creditSakana.S

Report a new vulnerability Found a mistake?

Introduced: 10 Mar 2025

NewCVE-2025-2136 (opens in a new tab) CWE-416 (opens in a new tab)

How to fix?

Upgrade chromium to version 134.0.6998.88 or higher.

Overview

Affected versions of this package are vulnerable to Use After Free via the Inspector component.

References

CVSS Base Scores

version 4.0

version 3.1

Attack Vector (AV)
Network
Attack Complexity (AC)
Low
Attack Requirements (AT)
None
Privileges Required (PR)
None
User Interaction (UI)
Partial

Confidentiality (VC)
Low
Integrity (VI)
Low
Availability (VA)
Low

Confidentiality (SC)
None
Integrity (SI)
None
Availability (SA)
None