CVE-2021-37979

PoC —

CVSS 3.1

8.8 high

EPSS

2%p77

Published

Nov 2, 2021 (Nov 2, 2021)

Modified

Jun 17, 2026

Description

heap buffer overflow in WebRTC in Google Chrome prior to 94.0.4606.81 allowed a remote attacker who convinced a user to browse to a malicious website to potentially exploit heap corruption via a crafted HTML page.

Vendors: google fedoraproject debian
Products: chrome, fedora, debian linux
Weakness: CWE-787
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.8%)

In the news2 stories

Vulnerability Spotlight: Heap buffer overflow condition in Google Chrome could lead to code execution

Cisco TalosJan 11, 15:07 UTC · Jan 11, 2022Vulnerability in the wildCVE-2021-37979

Google addresses four high

Security AffairsOct 9, 14:59 UTC · Oct 9, 2021Exploit / PoC CVE-2021-37977 CVE-2021-37978 CVE-2021-37979+1 CVEs