Critical Security Update for Chromium: DSA-5920-1
Summary
DSA-5920-1: chromium - security update. Affects chromium versions < 136.0.7103.113-1~deb12u1. Fixed in 136.0.7103.113-1~deb12u1. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
Chromium is an open-source web browser developed by Google, known for its speed, simplicity, and security features. It serves as the foundation for various browsers, including Google Chrome. The browser is widely used across different platforms and is continuously updated to enhance performance and security. However, like any software, it can be susceptible to vulnerabilities that may compromise user security and privacy.
Vulnerability Detail
The vulnerability identified as CVE-2025-4609 and CVE-2025-4664 in Chromium could allow attackers to execute arbitrary code or cause a denial of service. This issue arises from improper handling of certain inputs, which can be exploited by malicious actors. If left unaddressed, these vulnerabilities could lead to significant security breaches, including unauthorized access to sensitive user data and system compromise.
How To Fix
Minimum fixed version
136.0.7103.113-1~deb12u1
This is the first release that contains the fix.
sudo apt-get install --only-upgrade chromiumTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
Currently, there are no specific workarounds available for this vulnerability. The best course of action is to apply the security update as soon as it becomes available.
Conclusion
The identified vulnerabilities in Chromium pose significant risks to users, making it essential to apply the latest security updates promptly. By updating to the patched version, users can protect themselves from potential exploits and ensure a safer browsing experience.
See every vulnerability recorded for chromium →
FAQ
These are identifiers for specific vulnerabilities found in Chromium that could lead to security risks if not addressed.
You can use Vulert's playground at Vulert Scanner to check if your application is affected by this vulnerability without needing to sign up.
While there are no workarounds, it is crucial to prioritize updating to the latest version as soon as possible to protect against potential exploits.
Yes, failing to update can leave your system vulnerable to attacks that exploit these vulnerabilities, potentially leading to data breaches or system compromise.
Chromium receives regular updates to address security vulnerabilities, improve performance, and introduce new features. Users are encouraged to keep their installations up to date.
Related vulnerabilities
Recent vulnerabilities recorded for chromium.
