CVE-2022-2008

Chromium: CVE-2022-2008 Out of bounds memory access in WebGL

CVE-2022-2008 is fixed in 8 products on 2 platforms, first by chromium-browser 103.0.5060.134-0ubuntu0.18.04.1, released July 27, 2022. It is not reported as exploited. Patch Radar priority: High.

HighFixed on 2 platforms
CVSS
8.8
high
Exploitation
None reported
No vendor assessment
CISA KEV
Not listed
Not in the Known Exploited Vulnerabilities catalog
EPSS
0.0108
65th percentile

<p>This CVE was assigned by Chrome. Microsoft Edge (Chromium-based) ingests Chromium, which addresses this vulnerability. Please see <a href="https://chromereleases.googleblog.com/2022">Google Chrome Releases</a> for more information.</p>

Where it's fixed

ProductFixed inFixReleased
Windows apps
Microsoft Edge Beta 127.0.2651.8 Microsoft Edge Beta 127.0.2651.8 Jun 21, 2024
Microsoft Edge Dev 127.0.2651.8 Microsoft Edge Dev 127.0.2651.8 Jun 21, 2024
Linux
chromium · Debian 12.15 (bookworm) 102.0.5005.115-1 DEBIAN-CVE-2022-2008 Jul 28, 2022
chromium · Debian 13.5 (trixie) 102.0.5005.115-1 DEBIAN-CVE-2022-2008 Jul 28, 2022
chromium · Debian 14 102.0.5005.115-1 DEBIAN-CVE-2022-2008 Jul 28, 2022
chromium-browser · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-browser 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-browser-l10n · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-browser-l10n 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-chromedriver · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-chromedriver 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-codecs-ffmpeg · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-codecs-ffmpeg 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022
chromium-codecs-ffmpeg-extra · Ubuntu 18.04.6 LTS (bionic) 103.0.5060.134-0ubuntu0.18.04.1 chromium-codecs-ffmpeg-extra 103.0.5060.134-0ubuntu0.18.04.1 Jul 27, 2022