[Stanley]

CVE-2025-5958 - Google Chrome Media Use After Free Heap Corruption


CVE ID : CVE-2025-5958

Published : June 11, 2025, 1:15 a.m. | 2 days, 1 hour ago

Description : Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more...


https://cvefeed.io/vuln/detail/CVE-2025-5958

[Tyr]

CVE-2025-5958 - Google Chrome Media Use After Free Heap Corruption


CVE ID : CVE-2025-5958

Published : June 11, 2025, 1:15 a.m. | 2 days, 1 hour ago

Description : Use after free in Media in Google Chrome prior to 137.0.7151.103 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Severity: 8.8 | HIGH

Visit the link for more details, such as CVSS details, affected products, timeline, and more...


https://cvefeed.io/vuln/detail/CVE-2025-5958

The Stable channel has been updated to 137.0.7151.103/.104 for Windows, Mac and 137.0.7151.103 for Linux which will roll out over the coming days/weeks. A full list of changes in this build is available in the log from Google's site.

Credits:

[$8000][420150619] High CVE-2025-5958: Use after free in Media. Reported by Huang Xilin of Ant Group Light-Year Security Lab on 2025-05-25

[NA][422313191] High CVE-2025-5959: Type Confusion in V8. Reported by Seunghyun Lee as part of TyphoonPWN 2025 on 2025-06-04