Google Chrome Use-After-Free Vulnerability in libvpx Allowing Heap Corruption

A use-after-free vulnerability has been identified in the libvpx library used by Google Chrome, affecting versions prior to 137.0.7151.55. This vulnerability allows remote attackers to potentially exploit heap corruption by crafting a malicious HTML page.

Impact

Exploitation of this vulnerability could lead to heap corruption, which may be exploited to execute arbitrary code or cause a denial-of-service condition.

Remediation

Users are advised to upgrade to Google Chrome version 137.0.7151.55 or later. For Debian users, the libvpx package should be upgraded to version 1.9.0-1+deb11u4.