CVE-2025-4096 - AskarLabs CVE Database

CVE-2025-4096

Vendor Google

Product Chrome

Weakness CWE-122

Published May 5, 2025

Last update May 6, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Heap buffer overflow in HTML in Google Chrome prior to 136.0.7103.59 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Key dates

02Disclosure timeline

May 5, 2025 CVE published

May 6, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-4096 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/122.html

Related vulnerabilities

04Related CVE

CVE-2025-49850 Out-of-bounds Read in Write in LS Electric GMWin 4 CVE-2026-12912 Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image CVE-2025-47122 Adobe Framemaker | Heap-based Buffer Overflow (CWE-122) CVE-2026-20837 Windows Media Remote Code Execution Vulnerability CVE-2022-30650 Adobe InCopy Font Parsing Heap-based Buffer Overflow Remote Code Execution Vulnerability