Anymous

An out of bounds write in the GPU allows a remote attacker to potentially execute arbitrary code outside the sandbox when a user visits a crafted HTML page. An out of bounds write occurs when the program writes data past the end of the intended buffer, which can lead to memory corruption.

A Use After Free issue exists in the userspace drivers, where a non-privileged user process can access memory that has already been freed. This can be triggered by performing valid GPU processing operations, including through WebGL or WebGPU. Use After Free is a condition where a program continues to use a pointer after it has been freed, which can lead to crashes or unauthorized memory access.

Name of the Vulnerable Software and Affected Versions: Google Chrome versions prior to 125.0.6422.141 Microsoft Edge (affected versions not specified) Description: The issue is related to a use after free vulnerability in the Presentation API of Google Chrome and Microsoft Edge browsers. This vulnerability can be exploited by a remote attacker by loading a specially crafted HTML page, potentially allowing them to impact the confidentiality, integrity, and availability of protected information. The exploitation is related to heap corruption. Recommendations: For Google Chrome versions prior to 125.0.6422.141, update to version 125.0.6422.141 or later to resolve the issue. For Microsoft Edge, at the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider avoiding the use of the Presentation API until a patch is available.