Google · Chromium GPU
CVE-2022-4135
Google Chromium GPU Heap Buffer Overflow Vulnerability
O que é
Heap buffer overflow in GPU in Google Chrome prior to 107.0.5304.121 allowed a remote attacker who had compromised the renderer process to potentially perform a sandbox escape via a crafted HTML page. (Chromium security severity: High)
CISA: Google Chromium GPU contains a heap buffer overflow vulnerability that allows a remote attacker, who has compromised the renderer process, to potentially perform a sandbox escape via a crafted HTML page. This vulnerability could affect multiple web browsers that utilize Chromium, including, but not limited to, Google Chrome, Microsoft Edge, and Opera.
O que fazer
Apply updates per vendor instructions.
Prazo para as agências federais dos EUA: 19 de dezembro de 2022
Mais falhas exploradas de Google
| Adicionado | Vulnerabilidade | Produto | Gravidade | Chance de ataque |
|---|---|---|---|---|
| 27 de out. de 2026 | Unchecked Return Value | Brotli | Crítica 9,2 | 55% |
| 16 de set. de 2026 | Improper Authorization | Pixel | Alto 8,8 | 0,6% |
| 9 de set. de 2026 | Out of Bounds Write | Chromium V8 | Alto 8,8 | 3,5% |
| 4 de set. de 2026 | Type Confusion | Chromium V8 | Alto 8,8 | 1,8% |
| 9 de jun. de 2026 | Out-of-Bounds Read and Write | Chromium V8 | Alto 8,8 | 2,4% |
| 1 de abr. de 2026 | Use-After-Free | Dawn | Alto 8,8 | 14% |
| 13 de mar. de 2026 | Out-of-Bounds Write | Skia | Alto 8,8 | 2,3% |
| 13 de mar. de 2026 | Improper Restriction of Operations Within the Bounds of a Memory Buffer | Chromium V8 | Alto 8,8 | 2,7% |
Fontes: Known Exploited Vulnerabilities (CISA, domínio público), CVE records (cve.org) e EPSS (FIRST). A chance de ataque é a estimativa EPSS de que alguém tente explorar a falha nos próximos 30 dias.