Skip to content
OpenAdvisories
High · 7.8 CVE-2025-2509 EUVD-2025-13390GHSA-vv54-m573-67vp

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosv…

Published May 6, 2025 · Updated Feb 26, 2026 · Assigned by ChromeOS

Description

Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to
VM escape via crafted vertex elements data triggering an out-of-bounds read in util_format_description.

Affected products

VendorProductAffectedFixed
Google ChromeOS 16093.57.0 – < 16093.57.0 16093.57.0

References