CVE-2022-0310: 
vulnerability analysis and mitigation

A heap buffer overflow vulnerability was identified in the Task Manager component of Google Chrome versions prior to 97.0.4692.99. The vulnerability, tracked as CVE-2022-0310, was discovered and reported by researchers raven (@raid_akame) and Samet Bekmezci on December 15, 2021, and January 3, 2022, respectively (Chrome Release).

The vulnerability is classified as a heap buffer overflow issue specifically affecting the Task Manager component in Google Chrome. This type of vulnerability occurs when a program writes more data to a memory buffer than it can hold, potentially leading to memory corruption. The severity of this vulnerability was rated as Medium in Chrome's security advisory (Chrome Release).

The vulnerability could allow a remote attacker to potentially exploit heap corruption through specific user interactions. This type of vulnerability could potentially lead to program crashes or arbitrary code execution in the context of the browser (NVD).

Google addressed this vulnerability in Chrome version 97.0.4692.99 for Windows, Mac, and Linux platforms. Users are advised to update their Chrome browsers to this version or later to receive the security fix (Chrome Release).