Skip to content
OpenAdvisories
High · 8.8 CVE-2022-3045 EUVD-2022-42477GHSA-2cv3-9jp8-rgg3

Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit h…

Published Sep 26, 2022 · Updated May 22, 2025 · Assigned by Chrome

Description

Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

VendorProductAffectedFixed
Google Chrome unspecified – < 105.0.5195.52 105.0.5195.52

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 105.0.5195.52-1 —
Debian 13 chromium 105.0.5195.52-1 —
Debian 12 chromium 105.0.5195.52-1 —
Debian 11 chromium 105.0.5195.52-1~deb11u1 DSA-5223-1
ReleasePackageFixed inAdvisory
Ubuntu 18.04 LTS chromium-browser 105.0.5195.102-0ubuntu0.18.04.1 —
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP4 chromium 105.0.5195.102-bp154.2.26.1 openSUSE-SU-2022:10119-1
SUSE Package Hub 15 SP3 chromium 105.0.5195.102-bp153.2.119.1 openSUSE-SU-2022:10120-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 105.0.5195.102-1.1 openSUSE-SU-2024:12948-1, openSUSE-SU-2024:12319-1
openSUSE Leap 15.4 chromium 105.0.5195.102-bp154.2.26.1 openSUSE-SU-2022:10119-1
openSUSE Leap 15.3 chromium 105.0.5195.102-bp153.2.119.1 openSUSE-SU-2022:10120-1

Advisories 6

References