- Vendor / Project
- WebRTC
- Product
- WebRTC
- Date added
- Aug 25, 2022
- Due date
- Sep 15, 2022
- Known ransomware use
- Known
- CWEs
- CWE-122
Description
WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.
Required action
Apply updates per vendor instructions.