CVE-2022-2294

Description

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS breakdown

Affected products

• Apple / iPadOS15.6
• Apple / iphone_os15.6
• Apple / macOS11.6.8
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / mac_os_x10.15.7 – 10.15.7
• Apple / tvOS15.6
• Apple / watchOS8.7
• fedoraproject / extra_packages_for_enterprise_linux8.0 – 8.0
• fedoraproject / fedora36 – 36
• fedoraproject / fedora35 – 35
• Google / Chromeunspecified – 103.0.5060.114
• Google / Chrome103.0.5060.114
• WebKitGTK / WebKitGTK2.36.5
• webrtc_project / webrtc
• wpewebkit / wpe_webkit2.36.5

References

• MISChttps://crbug.com/1341043
• MISChttps://chromereleases.googleblog.com/2022/07/stable-channel-update-for-desktop.html
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/5BQRTR4SIUNIHLLPWTGYSDNQK7DYCRSB/
• MAILING_LISThttps://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/H2C4XOJVIILDXTOSMWJXHSQNEXFWSOD7/
• MAILING_LISThttp://www.openwall.com/lists/oss-security/2022/07/28/2
• MISChttps://security.gentoo.org/glsa/202208-35
• MISChttps://security.gentoo.org/glsa/202208-39
• MISChttps://security.gentoo.org/glsa/202311-11