CVE-2025-2509 Details
Description
Out-of-Bounds Read in Virglrenderer in ChromeOS 16093.57.0 allows a malicious guest VM to achieve arbitrary address access within the crosvm sandboxed process, potentially leading to VM escape via crafted vertex elements data triggering an out-of-bounds read in util_format_description.
A vulnerability in Virglrenderer, specifically within the ChromeOS 16093.57.0 release, allows a malicious guest virtual machine (VM) to access arbitrary memory addresses within the crosvm sandboxed process. This out-of-bounds read can potentially lead to VM escape by manipulating vertex element data to trigger the memory access violation.
The vulnerability has been fixed in the ChromeOS R133 release branch, and users should ensure they are updated to this version.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 7, 2025References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://issues.chromium.org/issues/b/385851796 | ChromeOS | Broken Link |
| https://issuetracker.google.com/issues/385851796 | ChromeOS | ExploitIssue Tracking |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-125 | Out-of-bounds Read | CISA-ADP |
Affected Products
| Product | Versions |
|---|---|
| google chrome os | 16093.57.0 |
CPE
Remediation
| |
Change History
5 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | ChromeOS |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Oct 3, 2025 | Initial Analysis | [email protected] |
| May 6, 2025 | CVE Modified | CISA-ADP |
| May 6, 2025 | New CVE Received | ChromeOS |