CVE-2025-0998

Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote...

5.9 MediumFix availableRejected

Not exploitable

Attack profile

How easy it is to exploit

Attack vector: Local
Complexity: Low
Privileges needed: None
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

What each source reports

GitHub Advisories Score usedGHSA-4v9x-qxmv-4h58 5.9

Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote...

Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)

Record: GHSA-4v9x-qxmv-4h58
CVSS 3.1: 5.9 MediumCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-125
Updated: 2026-11-02

CVE List No score

Not exploitable

Record: CVE-2025-0998
Updated: 2026-11-02

EUVDEUVD-2025-1959 9.6

Not exploitable

Record: EUVD-2025-1959
CVSS 3.1: 9.6 CriticalCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H
Updated: 2026-11-02

NVD No score

Rejected reason: Not exploitable

Record: CVE-2025-0998
Updated: 2026-11-02

OSVALPINE-CVE-2025-0998 No score

Rejected reason: Not exploitable

Record: ALPINE-CVE-2025-0998
Updated: 2026-11-03

OSV No score

Rejected reason: Not exploitable

Record: CVE-2025-0998
Updated: 2026-11-02

OSVMGASA-2025-0091 No score

Updated chromium-browser-stable packages fix security vulnerabilities

High CVE-2025-1914: Out of bounds read in V8. Medium CVE-2025-1915: Improper Limitation of a Pathname to a Restricted Directory in DevTools. Medium CVE-2025-1916: Use after free in Profiles. Medium CVE-2025-1917: Inappropriate Implementation in Browser UI. Medium CVE-2025-1918: Out of bounds read in PDFium. Medium CVE-2025-1919: Out of bounds read in Media. Medium CVE-2025-1921: Inappropriate Implementation in Media Low CVE-2025-1922: Inappropriate Implementation in Selection. Low CVE-2025-1923: Inappropriate Implementation in Permission Prompts. And more, please see the references.

Record: MGASA-2025-0091
Updated: 2026-11-02

OSVopenSUSE-SU-2025:0059-1 No score

Security update for chromium

This update for chromium fixes the following issues:

Chromium 133.0.6943.98 (boo#1237121):

CVE-2025-0995: Use after free in V8
CVE-2025-0996: Inappropriate implementation in Browser UI
CVE-2025-0997: Use after free in Navigation
CVE-2025-0998: Out of bounds memory access in V8

Record: openSUSE-SU-2025:0059-1
Updated: 2026-11-02

OSVopenSUSE-SU-2025:14812-1 No score

chromedriver-133.0.6943.98-2.1 on GA media

These are all security issues fixed in the chromedriver-133.0.6943.98-2.1 package on the GA media of openSUSE Tumbleweed.

Record: openSUSE-SU-2025:14812-1
Updated: 2026-11-02

Affected products

google chrome

Affected packages

Affected packages
Package	Affected	Fixed
`qt6-qtwebengine` Alpine:v3.22	before 6.8.2-r3	6.8.2-r3
`qt6-qtwebengine` Alpine:v3.23	before 6.8.2-r3	6.8.2-r3
`qt6-qtwebengine` Alpine:v3.24	before 6.8.2-r3	6.8.2-r3
`chromium-browser-stable` Mageia:9 From an advisory covering 19 CVEs	before 134.0.6998.35-1.mga9.tainted	134.0.6998.35-1.mga9.tainted
`chromium` SUSE:Package Hub 15 SP6 From an advisory covering 4 CVEs	before 133.0.6943.98-bp156.2.81.2	133.0.6943.98-bp156.2.81.2
`chromium` openSUSE:Leap 15.6 From an advisory covering 4 CVEs	before 133.0.6943.98-bp156.2.81.2	133.0.6943.98-bp156.2.81.2
`chromium` openSUSE:Tumbleweed From an advisory covering 4 CVEs	before 133.0.6943.98-2.1	133.0.6943.98-2.1

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	affected, aliases, references	OSV
Nov 3, 2026	affected
Nov 2, 2026	first indexed	CVE List, EUVD, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2025-0998 has been rejected by its source and should not be treated as a live vulnerability, published February 14, 2025. Fixed in qt6-qtwebengine 6.8.2-r3.

References

Show 12 moreShow less