BSD Ports

Chrome -- Out of bounds read

· CVE-2025-5419 · VuXML entry

[email protected] reports: Out of bounds read and write in V8 in Google Chrome prior to 137.0.7151.68 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected versions

By system

0 still vulnerable, 2 fixed. Where VuXML applies (FreeBSD, DragonFly, FreeBSD's derivatives) a port is vulnerable while its version is in a range; pkgsrc says itself whether it lists a CVE of this advisory; OpenBSD and MidnightBSD keep no list this site reads, so their row is only an estimate: FreeBSD's ranges applied to upstream's version.

SystemPortVersionStateFixed
DragonFlywww/chromium137.0.7151.119 fixed
OpenBSDwww/chromium156.0.8078.47 out of range, by version
NetBSDwww/chromium152.0.7977.82 not listed
MidnightBSDwww/chromium152.0.7977.75 out of range, by version
FreeBSDwww/chromium156.0.8078.47_1 fixed (393 days after)