Google Chrome SwiftShader Heap Buffer Overflow Vulnerability Allowing Out of Bounds Memory Read

A heap buffer overflow vulnerability has been identified in SwiftShader, which is used in Google Chrome on Mac and iOS. This vulnerability, present in versions prior to 148.0.7778.168, allows remote attackers to perform out of bounds memory reads by exploiting a crafted HTML page.

Impact

Exploitation of this vulnerability leads to a heap buffer overflow, allowing for out of bounds memory reads, which can potentially be used to execute arbitrary code or cause a denial of service.

Remediation

Users can update to Google Chrome version 148.0.7778.168 or later to address this vulnerability.