CVE-2022-2587: Google Chrome

Critical severity, CVSS 9.8. EPSS: 0.8% chance of exploitation in the next 30 days.

Out of bounds write in Chrome OS Audio Server in Google Chrome on Chrome OS prior to 102.0.5005.125 allowed a remote attacker to potentially exploit heap corruption via crafted audio metadata.

Affected products

• Google Chrome: before 102.0.5005.125 (fixed in 102.0.5005.125)

Published 2022-08-12. Last modified 2026-06-17.