VDB
CVE-2025-1122
CVE-2025-1122
PUBLISHED
CVSS 6.699999809265137 MEDIUM
Out-Of-Bounds Write in TPM2 Reference Library in Google ChromeOS 15753.50.0 stable on Cr50 Boards allows an attacker with root access to gain persistence and Bypass operating system verification via exploiting the NV_Read functionality during the Challenge-Response process.
EPSS 0.22% · 12.5th percentile
Risk Scores
CVSS 3.1
6.699999809265137
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS Score
0.22%
12.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| ChromeOS | 15753.50.0 | |
| chrome | 122.0.6261.132 |
Timeline
- Feb 7, 2025 CVE ID Reserved
- Apr 15, 2025 CVE Published
- Apr 15, 2025 PoC Published
- Apr 16, 2025 EPSS Score
- Apr 29, 2025 EPSS Score
- May 8, 2025 CVE Updated
- May 11, 2025 EPSS Score
- May 19, 2025 Coalition ESS Score
- May 24, 2025 EPSS Score
- Jun 5, 2025 EPSS Score
- Jun 18, 2025 EPSS Score
- Jul 1, 2025 EPSS Score