Edouard Bochin

An attacker was able to perform an out-of-bounds read or write on a JavaScript `Promise` object. This issue was demonstrated during Pwn2Own Berlin 2025, where it was used to trigger out-of-bounds memory access. The vulnerability allows for code execution.

The issue allows a remote attacker to potentially exploit heap corruption via a crafted web app, due to a use after free in the Network component. The severity of this issue is classified as Medium by Chromium.

The issue is related to out of bounds memory access in the V8 engine of Google Chrome, allowing a remote attacker to perform arbitrary read/write via a crafted HTML page. This can lead to remote code execution. The vulnerability was demonstrated at Pwn2Own 2024, where it was successfully exploited, and the attackers earned $42,500. The Chromium security severity of this issue is High.