CVE-2025-1122: google chrome Out-of-bounds Write
Vulnerability summary
CVE-2025-1122 is a medium (CVSS 6.7) Out-of-bounds Write vulnerability in google chrome. EPSS estimates a 0.22% chance of exploitation in the next 30 days, higher than 11.3% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 15-04-2025PublishedVulnerability first disclosed.
- 08-05-2025Last modifiedVulnerability information updated.
Description
Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.
CVSS metrics
2 scores · 2 sources · 1 version- NVDNIST6.7MediumCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS trend
Probability
0.22%
Chance of exploitation in the next 30 days
Percentile
11%
Versus all other CVEs
30-day change
0.00 pp
From 0.22% on 18-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundExploit Reference (issuetracker.google.com)
Maturity: unknown
Weaknesses
CWE · root causeAffected systems
1 vendor · 2 products
References
2 links- issues.chromium.org/issues/b/324336238Broken Link