Upstream information

CVE-2025-2476 at MITRE

Description

Use after free in Lens in Google Chrome prior to 134.0.6998.117 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: Critical)

SUSE information

Overall state of this security issue: Analysis

This issue is currently not rated by SUSE as it is not affecting the SUSE Enterprise products.

SUSE Bugzilla entry: 1239819 [NEW]

SUSE Security Advisories:

List of released packages

Product(s) Fixed package version(s) References
SUSE Package Hub 15 SP6
  • chromedriver >= 134.0.6998.117-bp156.2.96.1
  • chromium >= 134.0.6998.117-bp156.2.96.1
 Patchnames:
openSUSE-2025-98
openSUSE Leap 15.6
  • chromedriver >= 134.0.6998.117-bp156.2.96.1
  • chromium >= 134.0.6998.117-bp156.2.96.1
 Patchnames:
openSUSE-2025-98

SUSE Timeline for this CVE

CVE page created: Wed Mar 19 22:02:33 2025
CVE page last modified: Sat Mar 22 18:02:53 2025