CVE-2025-7656
NoneCVSS
—
EPSS
11.0%
Published
Jul 15, 2025
CISA due date
—
The record
Integer overflow in V8 in Google Chrome prior to 138.0.7204.157 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Debian:11 | chromium | 0 | No fix |
| Debian:12 | chromium | 0 | 138.0.7204.157-1~deb12u1 |
| Debian:13 | chromium | 0 | No fix |
| Debian:14 | chromium | 0 | 138.0.7204.157-1 |
| openSUSE:Tumbleweed | chromium | 0 | 138.0.7204.157-1.1 |
Related vulnerabilities
- CVE-2025-6558 Insufficient validation of untrusted input in ANGLE and GPU in Google Chrome prior to… Also affects chromium
- CVE-2025-6554 Type confusion in V8 in Google Chrome prior to 138.0.7204.96 allowed a remote attacker to… Also affects chromium
- CVE-2025-6191 Integer overflow in V8 in Google Chrome prior to 137.0.7151.119 allowed a remote attacker… Also affects chromium
- CVE-2025-5959 Type Confusion in V8 in Google Chrome prior to 137.0.7151.103 allowed a remote attacker… Also affects chromium
- CVE-2025-5419 Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a… Also affects chromium
- CVE-2022-2160 Insufficient policy enforcement in DevTools in Google Chrome on Windows prior to… Also affects chromium
- CVE-2022-0303 security update Also affects chromium
- CVE-2021-21206 Use after free in Blink in Google Chrome prior to 89.0.4389.128 allowed a remote attacker… Also affects chromium