VDB
CVE-2025-2073
CVE-2025-2073
PUBLISHED
CVSS 9.100000381469727 CRITICAL
Out-of-Bounds Read in ip_set_bitmap_ip.c in Google ChromeOS Kernel Versions 6.1, 5.15, 5.10, 5.4, 4.19. on All devices where Termina is used allows an attacker with CAP_NET_ADMIN privileges to cause memory corruption and potentially escalate privileges via crafted ipset commands.
EPSS 0.22% · 12.4th percentile
Risk Scores
CVSS 3.1
9.100000381469727
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H
EPSS Score
0.22%
12.4th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| chrome_os | 16093.103.0 | |
| ChromeOS | Kernal version 6.1, 5.15. 5.10, 4.19 chromeOS version 16093.103.0 |
Timeline
- Apr 16, 2025 CVE Published
- Apr 17, 2025 EPSS Score
- Apr 17, 2025 PoC Published
- Apr 17, 2025 PoC Published
- Apr 30, 2025 EPSS Score
- May 8, 2025 CVE Updated
- May 12, 2025 EPSS Score
- May 12, 2025 Coalition ESS Score
- May 25, 2025 EPSS Score
- Jun 6, 2025 EPSS Score
- Jun 19, 2025 EPSS Score
- Jul 1, 2025 EPSS Score