CVE-2025-14174

A flaw was found in ANGLE in Google Chrome. This vulnerability allows a remote attacker to perform out of bounds memory access via a crafted HTML (HyperText Markup Language) page. Although this was reported on Google Chrome, this issue also affected the WebKitGTK package with the same possible outcome.

This vulnerability is rated as Important by the Red Hat Product Security. A maliciously crafted web page may lead to out of bound memory access, specially in WebKitGTK component, and may be leverage to perform a remote code execution. For an attack be successfully performed, the user needs to be tricked to visit the malicious web page using the affected component.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.