CVE-2025-0436

Integer overflow in Skia in Google Chrome prior to 132.0.6834.83 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected

Google · Chrome

CVSS v3.1 CNA

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS

0.59% chance of exploitation in the next 30 days, 47th percentile

Published

2025-01-15

Updated

2025-03-18

Proof-of-concept exploits (1)

• https://issues.chromium.org/issues/382786791

Security advisories

• https://chromereleases.googleblog.com/2025/01/stable-channel-update-for-desktop_14.html

References

• CVE Record
• NVD entry