{"id":"CVE-2025-0998","aliases":["ALPINE-CVE-2025-0998","EUVD-2025-1959","GHSA-4v9x-qxmv-4h58","MGASA-2025-0091","openSUSE-SU-2025:0059-1","openSUSE-SU-2025:14812-1"],"status":"rejected","title":"Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote...","description":"Not exploitable","severity":{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-125"],"published":"2025-02-14T08:59:39Z","modified":"2026-11-03T06:32:58Z","fixes":[{"ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]},{"ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","fixed_in":["6.8.2-r3"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Alpine:v3.22","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.23","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"Alpine:v3.24","package":"qt6-qtwebengine","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"6.8.2-r3"}]}]},{"source":"osv","ecosystem":"Mageia:9","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"134.0.6998.35-1.mga9.tainted"}]}],"bundled":19},{"source":"osv","ecosystem":"SUSE:Package Hub 15 SP6","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"133.0.6943.98-bp156.2.81.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Leap 15.6","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"133.0.6943.98-bp156.2.81.2"}]}],"bundled":4},{"source":"osv","ecosystem":"openSUSE:Tumbleweed","package":"chromium","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"133.0.6943.98-2.1"}]}],"bundled":4}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-0998"},{"url":"https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_12.html","tags":["web"]},{"url":"https://issues.chromium.org/issues/386857213"},{"url":"https://github.com/advisories/GHSA-4v9x-qxmv-4h58"},{"url":"https://security.alpinelinux.org/vuln/CVE-2025-0998","tags":["advisory"]},{"url":"https://security-tracker.debian.org/tracker/CVE-2025-0998","tags":["advisory"]},{"url":"https://advisories.mageia.org/MGASA-2025-0091.html","tags":["advisory"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=34012","tags":["report"]},{"url":"https://chromereleases.googleblog.com/2025/03/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_25.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop_18.html","tags":["web"]},{"url":"https://chromereleases.googleblog.com/2025/02/stable-channel-update-for-desktop.html","tags":["web"]},{"url":"https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/DERIPK6CHHYPRK2YCNTZZQRMBSCBRFCJ/","tags":["advisory"]},{"url":"https://bugzilla.suse.com/1237121","tags":["report"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0995","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0996","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0997","tags":["web"]},{"url":"https://www.suse.com/security/cve/CVE-2025-0998","tags":["web"]},{"url":"","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2025-0998","description":"Not exploitable","status":"rejected","published":"2025-02-15T01:17:26.235Z","modified":"2025-04-04T15:20:31.501Z","updated_at":"2026-11-02T14:32:53.81273Z"}],"euvd":[{"id":"EUVD-2025-1959","description":"Not exploitable","status":"published","published":"2025-02-15T01:17:26Z","modified":"2025-04-04T15:20:31Z","cvss":[{"version":"3.1","score":9.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:52:42.420681Z"}],"ghsa":[{"id":"GHSA-4v9x-qxmv-4h58","title":"Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote...","description":"Out of bounds memory access in V8 in Google Chrome prior to 133.0.6943.98 allowed a remote attacker to execute arbitrary code inside a sandbox via a crafted HTML page. (Chromium security severity: High)","status":"published","published":"2025-02-15T03:31:24Z","modified":"2025-02-18T18:34:28Z","cvss":[{"version":"3.1","score":5.9,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"cwes":["CWE-125"],"updated_at":"2026-11-02T14:59:58.679357Z"}],"nvd":[{"id":"CVE-2025-0998","description":"Rejected reason: Not exploitable","status":"rejected","published":"2025-02-15T02:15:09.483Z","modified":"2025-04-04T16:15:18.013Z","updated_at":"2026-11-02T14:10:51.445921Z"}],"osv":[{"id":"ALPINE-CVE-2025-0998","description":"Rejected reason: Not exploitable","status":"published","published":"2025-02-15T02:15:09.483Z","modified":"2026-11-03T06:32:58.285296591Z","updated_at":"2026-11-03T07:16:09.603409Z"},{"id":"CVE-2025-0998","description":"Rejected reason: Not exploitable","status":"withdrawn","published":"2025-02-15T02:15:09Z","modified":"2026-04-16T04:30:40.461714263Z","updated_at":"2026-11-02T15:44:45.712478Z"},{"id":"MGASA-2025-0091","title":"Updated chromium-browser-stable packages fix security vulnerabilities","description":"High CVE-2025-1914: Out of bounds read in V8.\nMedium CVE-2025-1915: Improper Limitation of a Pathname to a Restricted\nDirectory in DevTools.\nMedium CVE-2025-1916: Use after free in Profiles.\nMedium CVE-2025-1917: Inappropriate Implementation in Browser UI.\nMedium CVE-2025-1918: Out of bounds read in PDFium.\nMedium CVE-2025-1919: Out of bounds read in Media.\nMedium CVE-2025-1921: Inappropriate Implementation in Media\nLow CVE-2025-1922: Inappropriate Implementation in Selection.\nLow CVE-2025-1923: Inappropriate Implementation in Permission Prompts.\nAnd more, please see the references.\n","status":"published","published":"2025-03-08T03:29:37Z","modified":"2026-04-16T04:44:36.67630533Z","updated_at":"2026-11-02T15:49:43.178336Z"},{"id":"openSUSE-SU-2025:0059-1","title":"Security update for chromium","description":"This update for chromium fixes the following issues:\n\nChromium 133.0.6943.98 (boo#1237121):\n\n- CVE-2025-0995: Use after free in V8\n- CVE-2025-0996: Inappropriate implementation in Browser UI\n- CVE-2025-0997: Use after free in Navigation\n- CVE-2025-0998: Out of bounds memory access in V8\n","status":"published","published":"2025-02-14T08:59:39Z","modified":"2026-02-04T03:38:56.924538Z","updated_at":"2026-11-02T16:58:36.976155Z"},{"id":"openSUSE-SU-2025:14812-1","title":"chromedriver-133.0.6943.98-2.1 on GA media","description":"These are all security issues fixed in the chromedriver-133.0.6943.98-2.1 package on the GA media of openSUSE Tumbleweed.","status":"published","published":"2025-02-15T00:00:00Z","modified":"2026-02-04T02:25:35.095909Z","updated_at":"2026-11-02T16:58:37.399567Z"}]}}