CVE-2025-1122
CVSS 3.1 Score 6.7 of 10 (medium)
Details
Published Apr 15, 2025
Updated: May 6, 2025
CWE ID 787
Summary
CVE-2025-1122 is a critical vulnerability affecting Google ChromeOS 15753.50.0 stable on Cr50 Boards. An out-of-bounds write issue in the TPM2 Reference Library allows an attacker with root access to manipulate the NV_Read functionality during the Challenge-Response process. Successful exploitation enables the attacker to gain persistence and bypass operating system verification, potentially compromising the system's security. This vulnerability poses a significant risk and requires immediate attention and patching.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Google Chrome OS