CVE-2022-2294: WebRTC Heap Buffer Overflow Vulnerability. WebRTC, an
WebRTC Heap Buffer Overflow Vulnerability. WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.
- CISA KEV-listed (remediation due 2022-09-15)
- used in ransomware campaigns
- EPSS 1.5% (81.5% percentile)