WebRTC WebRTC

What it is

WebRTC, an open-source project providing web browsers with real-time communication, contains a heap buffer overflow vulnerability that allows an attacker to perform shellcode execution. This vulnerability impacts web browsers using WebRTC including but not limited to Google Chrome.

What to do

Apply updates per vendor instructions.

Vendor notices and references

• groups.google.com/g/discuss-webrtc/c/5KBtZx2gvcQ
• nvd.nist.gov/vuln/detail/CVE-2022-2294

Description and required action as published by CISA. Full record at NVD.