CVE-2022-0343: Google Perfetto

High severity, CVSS 7.8. EPSS: 0.1% chance of exploitation in the next 30 days.

A local attacker, as a different local user, may be able to send a HTTP request to 127.0.0.1:10000 after the user (typically a developer) manually invoked the ./tools/run-dev-server script. It is recommended to upgrade to any version beyond 24.2

Affected products

• Google Perfetto: up to and including 24.2

Published 2022-03-29. Last modified 2026-06-17.