Vulnerability DatabaseCVE-2025-6191

CVE-2025-6191:
Google Chrome vulnerability analysis and mitigation

Overview

Integer overflow vulnerability (CVE-2025-6191) was discovered in Google Chrome's V8 JavaScript engine affecting versions prior to 137.0.7151.119. The vulnerability was reported by security researcher Shaheen Fazim on May 27, 2025, and was assigned a high severity rating (Chrome Release).

Technical details

The vulnerability is an integer overflow condition in Chrome's V8 JavaScript engine that could potentially lead to out of bounds memory access when processing crafted HTML pages. The issue received a CVSS 3.1 base score of 8.8 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H, indicating network accessibility with low attack complexity requiring user interaction (NVD).

Impact

If successfully exploited, this vulnerability could allow an attacker to perform out of bounds memory access through a specially crafted HTML page, potentially leading to memory corruption or arbitrary code execution within the browser's context (Security Online).

Mitigation and workarounds

Google has released version 137.0.7151.119/.120 for Windows and macOS, and 137.0.7151.119 for Linux to address this vulnerability. Users are advised to update their Chrome browsers immediately by navigating to Settings > About Chrome to trigger the update process (Chrome Release).