8.8

CVE-2022-2294: WebRTC Heap Buffer Overflow Vulnerability

CVSS: 8.8v3.1HighKEVRansomwareAnalyzed
AliasesUBUNTU-CVE-2022-2294DEBIAN-CVE-2022-2294
Published 28-07-2022Last modified 04-08-2026
Open JSON

Vulnerability summary

CVE-2022-2294 is a high (CVSS 8.8) Out-of-bounds Write vulnerability in WebRTC. It is known to be exploited: CISA lists it, first on 25-08-2022. It has been used in ransomware campaigns. EPSS estimates a 70.83% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities.

Overall risk
90/100
0100
Critical · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
70.83%
0%100%
Critical · +0.37 pp in 30 days
KEVListedCISA
RansomwareKnown useFlagged by CISA
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 9 · Related 7
DSA-5180-1MGASA-2022-0287OPENSUSE-SU-2022:10055-1OPENSUSE-SU-2022:10057-1OPENSUSE-SU-2022:10087-1OPENSUSE-SU-2022:10088-1

Timeline

  1. 28-07-2022
    PublishedVulnerability first disclosed.
  2. 25-08-2022
    Added to CISA KEVWebRTC Heap Buffer Overflow Vulnerability
  3. 15-09-2022
    CISA remediation dueApply updates per vendor instructions.
  4. 04-08-2026
    Last modifiedVulnerability information updated.

Description

Heap buffer overflow in WebRTC in Google Chrome prior to 103.0.5060.114 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page.

CVSS metrics

4 scores · 4 sources · 1 version

EPSS trend

Probability

70.83%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

+0.37 pp

From 70.46% on 19-09-2026

19-09-202619-10-2026
EPSS score
70.83%

Known exploited

Compare KEV catalogs
CISA KEVListed
Added
25-08-2022
Federal due date
15-09-2022
Ransomware

CISA required action

Apply updates per vendor instructions. groups.google.com/g/discuss-webrtc/c/5KBtZx2gvcQ nvd.nist.gov/vuln/detail/CVE-2022-2294

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Apple6 products
  • ipados< 15.6
  • iphone_os< 15.6
  • mac_os_x< 10.15.7 | 10.15.7 | 10.15.7:security_update_2020 | 10.15.7:security_update_2020-001 | 10.15.7:security_update_2020-005 | 10.15.7:security_update_2020-007 | 10.15.7:security_update_2021-001 | 10.15.7:security_update_2021-002 | 10.15.7:security_update_2021-003 | 10.15.7:security_update_2021-004 | 10.15.7:security_update_2021-005 | 10.15.7:security_update_2021-006 | 10.15.7:security_update_2021-007 | 10.15.7:security_update_2021-008 | 10.15.7:security_update_2022-001 | 10.15.7:security_update_2022-002 | 10.15.7:security_update_2022-003 | 10.15.7:security_update_2022-004
  • macos< 11.6.8 | ≥ 12.0, < 12.5
  • tvos< 15.6
Ubuntu6 products
  • chromium-browser< 103.0.5060.134-0ubuntu0.18.04.1
  • qtwebkit-opensource-srcAll versions (No fix recorded)
  • qtwebkit-sourceAll versions (No fix recorded)
  • webkit2gtkAll versions (No fix recorded) | < 2.36.6-0ubuntu0.20.04.1 | < 2.36.6-0ubuntu0.22.04.1
  • webkitgtkAll versions (No fix recorded)
Debian3 products
  • chromium< 103.0.5060.114-1
  • webkit2gtk< 2.36.6-1
  • wpewebkit< 2.36.6-1
Fedoraproject2 products
Google1 product
  • chrome≥ unspecified, < 103.0.5060.114 | < 103.0.5060.114
Webkitgtk1 product
Webrtc_project1 product
Wpewebkit1 product

8 vendors · 21 products

References

14 links
Show all 14 references