Skip to content
OpenAdvisories
High · 8.2 CVE-2025-0611 EUVD-2025-1789GHSA-83vc-v46q-mv3w

Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a cra…

Published Jan 22, 2025 · Updated Feb 6, 2025 · Assigned by Chrome

Description

Object corruption in V8 in Google Chrome prior to 132.0.6834.110 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected products

VendorProductAffectedFixed
Google Chrome 132.0.6834.110 – < 132.0.6834.110 132.0.6834.110

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Debian 14 chromium 132.0.6834.110-1 —
Debian 13 chromium 132.0.6834.110-1 —
Debian 12 chromium 132.0.6834.110-1~deb12u1 DSA-5848-1
ReleasePackageFixed inAdvisory
SUSE Package Hub 15 SP6 chromium 132.0.6834.110-bp156.2.72.1 openSUSE-SU-2025:0034-1
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed chromium 132.0.6834.110-1.1 openSUSE-SU-2025:14698-1
openSUSE Tumbleweed nodejs-electron 33.4.2-1.1 openSUSE-SU-2025:14848-1
openSUSE Leap 15.6 chromium 132.0.6834.110-bp156.2.72.1 openSUSE-SU-2025:0034-1
ReleasePackageFixed inAdvisory
Alpine v3.24 qt6-qtwebengine 6.8.2-r3 —
Alpine v3.23 qt6-qtwebengine 6.8.2-r3 —
Alpine v3.22 qt6-qtwebengine 6.8.2-r3 —

Azure Linux

ReleasePackageFixed inAdvisory
Azure Linux 3 nodejs 24.14.1-3 —
Azure Linux 2 (CBL-Mariner) nodejs18 No fix yet —

Wolfi

ReleasePackageFixed inAdvisory
Wolfi rolling chromium 132.0.6834.153-r0 —

Advisories 5

References