High severity8.8NVD Advisory· Published Jul 28, 2022· Updated Jun 17, 2026

CVE-2022-2415

Description

Heap buffer overflow in WebGL in Google Chrome prior to 103.0.5060.53 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

Affected products

Google/Chrome3 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <103.0.5060.53
- (no CPE)range: <103.0.5060.53
- (no CPE)range: unspecified

Patches

Vulnerability mechanics

References

packetstormsecurity.com/files/167972/Chrome-WebGL-Uniform-Integer-Overflows.htmlnvdThird Party AdvisoryVDB Entry
chromereleases.googleblog.com/2022/06/stable-channel-update-for-desktop_21.htmlnvdRelease NotesVendor Advisory
crbug.com/1316368nvdPermissions RequiredVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000