8.8High

CVE-2025-2073

Google ChromeOS Published: (1 year ago)

Description

Out-of-Bounds Read in netfilter/ipset in Linux Kernel ChromeOS [6.1, 5.15, 5.10, 5.4, 4.19] allows a local attacker with low privileges to trigger an out-of-bounds read, potentially leading to information disclosure

Weakness (CWE): CWE-125

Data: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Published as the sources state it, in English.

Affected products and versions

VendorProductVersions
google chrome os 16093.103.0
Google ChromeOS Kernal version 6.1, 5.15. 5.10, 4.19 chromeOS version 16093.103.0 – < Kernal version 6.1, 5.15. 5.10, 4.19 chromeOS version 16093.103.0

References and patches

CPE matches (NVD) (1)

  • cpe:2.3:o:google:chrome_os:16093.103.0:*:*:*:*:*:*:*