Out-of-Bounds Read Vulnerability in Google ChromeOS Kernel
CVE-2025-2073

8.8HIGH

Key Information:

Vendor

Google
Status
Chromeos
Vendor
CVE Published:
16 April 2025

What is CVE-2025-2073?

A vulnerability exists in the Google ChromeOS Kernel that enables an out-of-bounds read condition within the ip_set_bitmap_ip.c file. This flaw affects multiple kernel versions and can be exploited by an attacker with CAP_NET_ADMIN privileges, allowing for memory corruption through specially crafted ipset commands. Successful exploitation could result in privilege escalation, posing significant security risks across affected devices utilizing Termina.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

ChromeOS Kernal version 6.1, 5.15. 5.10, 4.19 chromeOS version 16093.103.0

References

https://issuetracker.google.com/issues/380043638
https://issues.chromium.org/issues/b/380043638

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.