Google has announced a patch for the fifth zero-day vulnerability in Chrome in 2022, addressing a significant issue with insufficient input validation in Intents.
The vulnerability, tracked as CVE-2022-2856, allows for arbitrary code execution and was reported by Ashley Shen and Christian Resell from Google’s Threat Analysis Group.
Intents are a complex linking feature in Chrome that requires developers to adapt their approach since it replaces traditional URI schemes for deep linking on Android.
Insufficient input validation is a core issue that can lead to unwanted input handling by software, potentially allowing attackers to exploit and execute arbitrary code.
[
Collection
]
[
|
...
]