Use After Free Vulnerability in Google Chrome WebAudio Component
CVE-2025-4372

8.8HIGH

Key Information:

Vendor
Google
Status
Vendor
CVE Published:
6 May 2025

Summary

A use after free vulnerability exists in the WebAudio component of Google Chrome, which can be exploited by an attacker through specially crafted HTML pages. If successfully executed, this could lead to heap corruption, potentially allowing unauthorized access or control over system resources. Users are advised to update to the latest version to mitigate risks associated with this vulnerability.

Affected Version(s)

Chrome 136.0.7103.92

References

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2025-4372 : Use After Free Vulnerability in Google Chrome WebAudio Component | SecurityVulnerability.io