CVE-2025-9132

HIGH8.8EPSS 0.19%

chromium - security update

Published: 8/20/2025Modified: 3/9/2026

Also known as:DSA-5981-1DEBIAN-CVE-2025-9132

Description

Out of bounds write in V8 in Google Chrome prior to 139.0.7258.138 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. (Chromium security severity: High)

Affected packages (2)

Debian/chromiumfrom 0
Debian/chromiumfrom 0, < 139.0.7258.138-1~deb12u1

CVSS scores

Source	Version	Severity	Vector
osv	CVSS 3.1	HIGH8.8	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

References (1)

ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2025-9132