CVE-2022-2294

Producto

WebRTC / WebRTC

Vulnerabilidad

WebRTC Heap Buffer Overflow Vulnerability

Añadido a KEV

25 ago 2022

Remediar antes de

15 sept 2022

Uso conocido en ransomware

Sí

Descripción resumida

WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.

Acción requerida

Apply updates per vendor instructions.

Notas

https://groups.google.com/g/discuss-webrtc/c/5KBtZx2gvcQ; https://nvd.nist.gov/vuln/detail/CVE-2022-2294