CVE-2022-0104: 
vulnerability analysis and mitigation

CVE-2022-0104 is a heap buffer overflow vulnerability discovered in the ANGLE (Almost Native Graphics Layer Engine) component of Google Chrome versions prior to 97.0.4692.71. The vulnerability was reported on November 25, 2021, and publicly disclosed on January 4, 2022 (Chrome Release, NVD).

The vulnerability is classified as a heap buffer overflow in ANGLE, which is a graphics engine abstraction layer used by Google Chrome. The issue could be triggered through a crafted HTML page, potentially leading to heap corruption (NVD). The vulnerability was reported by security researchers Abraruddin Khan and Omair (Chrome Release).

If successfully exploited, this heap buffer overflow vulnerability could potentially lead to heap corruption, which might result in program crashes or potential code execution. The vulnerability affects Google Chrome installations across multiple platforms (NVD).

Google addressed this vulnerability in Chrome version 97.0.4692.71. Users and administrators are advised to update to this version or later to mitigate the risk. The fix was also incorporated into various Linux distributions including Fedora and Debian through their respective security updates (Debian Tracker).