BaseFortify

Publication date: 2025-11-10

Last updated on: 2025-11-13

Assigner: Chrome

Description

Out of bounds read in WebXR in Google Chrome prior to 142.0.7444.59 allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page. (Chromium security severity: Medium)

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-11-10

Last Modified

2025-11-13

Generated

2026-07-06

AI Q&A

2025-11-10

EPSS Evaluated

2026-07-05

NVD

CVE-2025-12443

Affected Vendors & Products

Vendor	Product	Version / Range
google	chrome	to 142.0.7444.59 (exc)
apple	macos	*
linux	linux_kernel	*
microsoft	windows	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-125	The product reads data past the end, or before the beginning, of the intended buffer.

Attack-Flow Graph

Executive Summary

This vulnerability is an out of bounds read in the WebXR component of Google Chrome versions prior to 142.0.7444.59. It allows a remote attacker to cause the browser to read memory outside the intended bounds by using a specially crafted HTML page.

Impact Analysis

The impact of this vulnerability is that a remote attacker could read memory outside the intended boundaries, potentially exposing sensitive information or causing unexpected behavior in the browser. The severity is rated as Medium.

Hi! I’m here to help you understand CVE-2025-12443. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70