Google Chrome V8 Out-of-Bounds Memory Access Vulnerability Allowing Heap Corruption

A high-severity out-of-bounds memory access vulnerability has been identified in the V8 JavaScript engine of Google Chrome. This issue affects Chrome versions prior to 132.0.6834.83. The vulnerability could allow a remote attacker to exploit heap corruption by sending a crafted HTML page.

Impact

Exploitation of this vulnerability leads to a type confusion error in the V8 engine, allowing for potential memory corruption in a sandboxed process, which could be exploited to execute arbitrary code.

Reproduction

The vulnerability can be reproduced using a JavaScript file (poc.js) that triggers the out-of-bounds memory access. This file can be executed with the V8 command-line tool (d8) that has been compiled with AddressSanitizer, a memory error detector.

Remediation

Users should update to Google Chrome version 132.0.6834.83 or later, where this vulnerability has been fixed.