Use After Free Vulnerability in WebRTC of Google Chrome
CVE-2025-10501

8.8HIGH

Key Information:

Vendor

Google
Status
Chrome
Vendor
CVE Published:
24 September 2025

What is CVE-2025-10501?

An issue has been identified in the WebRTC component of Google Chrome, where a use after free vulnerability may lead to heap corruption. This flaw can be leveraged by remote attackers through specially crafted HTML pages, potentially compromising user safety. Users of Google Chrome are advised to update to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Chrome 140.0.7339.185

References

https://chromereleases.googleblog.com/2025/09/stable-chan...
https://issues.chromium.org/issues/440737137

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.
CVE-2025-10501 : Use After Free Vulnerability in WebRTC of Google Chrome