{"dataType": "CVE_RECORD", "dataVersion": "5.1", "cveMetadata": {"cveId": "CVE-2025-5283", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "state": "PUBLISHED", "assignerShortName": "Chrome", "dateReserved": "2025-05-27T17:04:44.699Z", "datePublished": "2025-05-27T20:43:04.737Z", "dateUpdated": "2025-05-31T23:03:07.623Z"}, "containers": {"cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"version": "137.0.7151.55", "status": "affected", "lessThan": "137.0.7151.55", "versionType": "custom"}]}], "descriptions": [{"lang": "en", "value": "Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "Use after free", "cweId": "CWE-416"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2025-05-27T20:43:04.737Z"}, "references": [{"url": "https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html"}, {"url": "https://issues.chromium.org/issues/419467315"}]}, "adp": [{"problemTypes": [{"descriptions": [{"type": "CWE", "cweId": "CWE-416", "lang": "en", "description": "CWE-416 Use After Free"}]}], "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"timestamp": "2025-05-28T13:25:59.943260Z", "id": "CVE-2025-5283", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-28T14:20:17.467Z"}}, {"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00052.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-05-31T23:03:07.623Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CVE Program Container", "references": [{"url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00052.html"}], "providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2025-05-31T23:03:07.623Z"}}, {"title": "CISA ADP Vulnrichment", "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}, {"other": {"type": "ssvc", "content": {"id": "CVE-2025-5283", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-05-28T13:25:59.943260Z"}}}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-416", "description": "CWE-416 Use After Free"}]}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-05-28T13:26:39.599Z"}}], "cna": {"affected": [{"vendor": "Google", "product": "Chrome", "versions": [{"status": "affected", "version": "137.0.7151.55", "lessThan": "137.0.7151.55", "versionType": "custom"}]}], "references": [{"url": "https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html"}, {"url": "https://issues.chromium.org/issues/419467315"}], "descriptions": [{"lang": "en", "value": "Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"}], "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-416", "description": "Use after free"}]}], "providerMetadata": {"orgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "shortName": "Chrome", "dateUpdated": "2025-05-27T20:43:04.737Z"}}}, "cveMetadata": {"cveId": "CVE-2025-5283", "state": "PUBLISHED", "dateUpdated": "2025-05-31T23:03:07.623Z", "dateReserved": "2025-05-27T17:04:44.699Z", "assignerOrgId": "ebfee0ef-53dd-4cf3-9e2a-08a5bd7a7e28", "datePublished": "2025-05-27T20:43:04.737Z", "assignerShortName": "Chrome"}, "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*", "matchCriteriaId": "C4C36BDE-BF33-4327-BF14-F57A7619FC6D", "versionEndExcluding": "137.0.7151.55", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)"}, {"lang": "es", "value": "Use After Free de libvpx en Google Chrome anterior a la versi\u00f3n 137.0.7151.55 permit\u00eda a un atacante remoto explotar la corrupci\u00f3n del mont\u00f3n mediante una p\u00e1gina HTML manipulada. (Gravedad de seguridad de Chromium: Media)"}], "id": "CVE-2025-5283", "lastModified": "2025-05-31T23:15:20.553", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}, "published": "2025-05-27T21:15:23.823", "references": [{"source": "chrome-cve-admin@google.com", "tags": ["Release Notes"], "url": "https://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html"}, {"source": "chrome-cve-admin@google.com", "tags": ["Permissions Required"], "url": "https://issues.chromium.org/issues/419467315"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://lists.debian.org/debian-lts-announce/2025/05/msg00052.html"}], "sourceIdentifier": "chrome-cve-admin@google.com", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-416"}], "source": "chrome-cve-admin@google.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-416"}], "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary"}]}

{"affected_release": [{"advisory": "RHSA-2025:8341", "cpe": "cpe:/o:redhat:enterprise_linux:10.0", "package": "firefox-0:128.11.0-1.el10_0", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2025-06-02T00:00:00Z"}, {"advisory": "RHSA-2025:8608", "cpe": "cpe:/o:redhat:enterprise_linux:10.0", "package": "thunderbird-0:128.11.0-1.el10_0", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2025-06-05T00:00:00Z"}, {"advisory": "RHSA-2025:9120", "cpe": "cpe:/o:redhat:enterprise_linux:10.0", "package": "libvpx-0:1.14.1-3.el10_0", "product_name": "Red Hat Enterprise Linux 10", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9074", "cpe": "cpe:/o:redhat:rhel_els:7", "package": "firefox-0:128.11.0-1.el7_9", "product_name": "Red Hat Enterprise Linux 7 Extended Lifecycle Support", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8308", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "firefox-0:128.11.0-1.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2025-05-29T00:00:00Z"}, {"advisory": "RHSA-2025:8756", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "thunderbird-0:128.11.0-1.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2025-06-10T00:00:00Z"}, {"advisory": "RHSA-2025:9119", "cpe": "cpe:/a:redhat:enterprise_linux:8", "package": "libvpx-0:1.7.0-12.el8_10", "product_name": "Red Hat Enterprise Linux 8", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8631", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "thunderbird-0:128.11.0-1.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9075", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "firefox-0:128.11.0-1.el8_2", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9128", "cpe": "cpe:/a:redhat:rhel_aus:8.2", "package": "libvpx-0:1.7.0-8.el8_2.1", "product_name": "Red Hat Enterprise Linux 8.2 Advanced Update Support", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8630", "cpe": "cpe:/a:redhat:rhel_aus:8.4", "package": "thunderbird-0:128.11.0-1.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9076", "cpe": "cpe:/a:redhat:rhel_aus:8.4", "package": "firefox-0:128.11.0-1.el8_4", "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9127", "cpe": "cpe:/a:redhat:rhel_aus:8.4", "package": "libvpx-0:1.7.0-10.el8_4.1", "product_name": "Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8629", "cpe": "cpe:/a:redhat:rhel_aus:8.6", "package": "thunderbird-0:128.11.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9126", "cpe": "cpe:/a:redhat:rhel_aus:8.6", "package": "libvpx-0:1.7.0-10.el8_6.1", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9155", "cpe": "cpe:/a:redhat:rhel_aus:8.6", "package": "firefox-0:128.11.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support", "release_date": "2025-06-17T00:00:00Z"}, {"advisory": "RHSA-2025:8629", "cpe": "cpe:/a:redhat:rhel_tus:8.6", "package": "thunderbird-0:128.11.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9126", "cpe": "cpe:/a:redhat:rhel_tus:8.6", "package": "libvpx-0:1.7.0-10.el8_6.1", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9155", "cpe": "cpe:/a:redhat:rhel_tus:8.6", "package": "firefox-0:128.11.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Telecommunications Update Service", "release_date": "2025-06-17T00:00:00Z"}, {"advisory": "RHSA-2025:8629", "cpe": "cpe:/a:redhat:rhel_e4s:8.6", "package": "thunderbird-0:128.11.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9126", "cpe": "cpe:/a:redhat:rhel_e4s:8.6", "package": "libvpx-0:1.7.0-10.el8_6.1", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9155", "cpe": "cpe:/a:redhat:rhel_e4s:8.6", "package": "firefox-0:128.11.0-1.el8_6", "product_name": "Red Hat Enterprise Linux 8.6 Update Services for SAP Solutions", "release_date": "2025-06-17T00:00:00Z"}, {"advisory": "RHSA-2025:8628", "cpe": "cpe:/a:redhat:rhel_tus:8.8", "package": "thunderbird-0:128.11.0-1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9125", "cpe": "cpe:/a:redhat:rhel_tus:8.8", "package": "libvpx-0:1.7.0-10.el8_8.1", "product_name": "Red Hat Enterprise Linux 8.8 Telecommunications Update Service", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8628", "cpe": "cpe:/a:redhat:rhel_e4s:8.8", "package": "thunderbird-0:128.11.0-1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9077", "cpe": "cpe:/a:redhat:rhel_e4s:8.8", "package": "firefox-0:128.11.0-1.el8_8", "product_name": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9125", "cpe": "cpe:/a:redhat:rhel_e4s:8.8", "package": "libvpx-0:1.7.0-10.el8_8.1", "product_name": "Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8293", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "firefox-0:128.11.0-1.el9_6", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-05-29T00:00:00Z"}, {"advisory": "RHSA-2025:8607", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "thunderbird-0:128.11.0-1.el9_6", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-06-05T00:00:00Z"}, {"advisory": "RHSA-2025:9118", "cpe": "cpe:/a:redhat:enterprise_linux:9", "package": "libvpx-0:1.9.0-9.el9_6", "product_name": "Red Hat Enterprise Linux 9", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8598", "cpe": "cpe:/a:redhat:rhel_e4s:9.0", "package": "thunderbird-0:128.11.0-1.el9_0", "product_name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "release_date": "2025-06-05T00:00:00Z"}, {"advisory": "RHSA-2025:9073", "cpe": "cpe:/a:redhat:rhel_e4s:9.0", "package": "firefox-0:128.11.0-1.el9_0", "product_name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9124", "cpe": "cpe:/a:redhat:rhel_e4s:9.0", "package": "libvpx-0:1.9.0-7.el9_0.1", "product_name": "Red Hat Enterprise Linux 9.0 Update Services for SAP Solutions", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8642", "cpe": "cpe:/a:redhat:rhel_e4s:9.2", "package": "thunderbird-0:128.11.0-1.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date": "2025-06-09T00:00:00Z"}, {"advisory": "RHSA-2025:9071", "cpe": "cpe:/a:redhat:rhel_e4s:9.2", "package": "firefox-0:128.11.0-1.el9_2", "product_name": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9123", "cpe": "cpe:/a:redhat:rhel_e4s:9.2", "package": "libvpx-0:1.9.0-7.el9_2.1", "product_name": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:8599", "cpe": "cpe:/a:redhat:rhel_eus:9.4", "package": "thunderbird-0:128.11.0-1.el9_4", "product_name": "Red Hat Enterprise Linux 9.4 Extended Update Support", "release_date": "2025-06-05T00:00:00Z"}, {"advisory": "RHSA-2025:9072", "cpe": "cpe:/a:redhat:rhel_eus:9.4", "package": "firefox-0:128.11.0-1.el9_4", "product_name": "Red Hat Enterprise Linux 9.4 Extended Update Support", "release_date": "2025-06-16T00:00:00Z"}, {"advisory": "RHSA-2025:9122", "cpe": "cpe:/a:redhat:rhel_eus:9.4", "package": "libvpx-0:1.9.0-7.el9_4.1", "product_name": "Red Hat Enterprise Linux 9.4 Extended Update Support", "release_date": "2025-06-16T00:00:00Z"}], "bugzilla": {"description": "libvpx: Double-free in libvpx encoder", "id": "2368749", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2368749"}, "csaw": false, "cvss3": {"cvss3_base_score": "8.1", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N", "status": "verified"}, "cwe": "CWE-415", "details": ["Use after free in libvpx in Google Chrome prior to 137.0.7151.55 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Medium)", "A flaw was found in libvpx. A double-free issue can occur in `vpx_codec_enc_init_multi` after a failed allocation when initializing the encoder for WebRTC. This can cause memory corruption and an exploitable crash."], "mitigation": {"lang": "en:us", "value": "Mitigation is either unavailable or does not meet Red Hat Product Security standards for usability, deployment, applicability, or stability."}, "name": "CVE-2025-5283", "package_state": [{"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "rhel10/firefox-flatpak", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:10", "fix_state": "Affected", "package_name": "rhel10/thunderbird-flatpak", "product_name": "Red Hat Enterprise Linux 10"}, {"cpe": "cpe:/o:redhat:enterprise_linux:6", "fix_state": "Out of support scope", "package_name": "libvpx", "product_name": "Red Hat Enterprise Linux 6"}, {"cpe": "cpe:/o:redhat:enterprise_linux:7", "fix_state": "Affected", "package_name": "libvpx", "product_name": "Red Hat Enterprise Linux 7"}], "public_date": "2025-05-27T18:56:00Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2025-5283\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-5283\nhttps://chromereleases.googleblog.com/2025/05/stable-channel-update-for-desktop_27.html\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2025-44/#CVE-2025-5283\nhttps://www.mozilla.org/en-US/security/advisories/mfsa2025-46/"], "statement": "This vulnerability marked as Important rather than Moderate due to the nature of the flaw, a double-free in vpx_codec_enc_init_multi, which can lead to heap memory corruption. Double-free issues compromise memory integrity and are often a precursor to use-after-free or arbitrary code execution vulnerabilities, particularly in applications written in C/C++ that lack memory safety guarantees. In this case, the vulnerability occurs during encoder initialization for WebRTC, a high-frequency, remotely triggerable code path in browsers like Firefox. Because the failure happens after a failed allocation, it exposes a non-trivial edge case in error handling, which can be difficult to audit and reliably mitigate. The risk is elevated by the fact that WebRTC handles untrusted input from remote peers, making the flaw remotely exploitable in real-world scenarios.", "threat_severity": "Important"}