Read the docs
TI-2012-04313 Aliases CVE-2012-5122GHSA-m4w6-44xh-crf6

Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified…

Priority LOW 36CWE-399Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
— Not recorded in CVSS 2.0
Attack complexity
Low
Impact type
Code execution
Confidentiality · integrity · availability
Partial · Partial · Partial
Fix status
No fix listed

Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-399 and the CVSS impact.

Summary

Google Chrome before 23.0.1271.64 does not properly perform a cast of an unspecified variable during handling of input, which allows remote attackers to cause a denial of service or possibly have other impact via unknown vectors.

Why it matters now

EPSS 0.01375 72nd percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet

SSVC decision points

Not available: CISA has not published SSVC decision points for this record.

Affected products

VendorProductAffected versionsFixed inStatusSource
——all versions—No fix listedCNA
  • — Vendor— Affected all versions Fixed in — No fix listed CNA

CPE configurations NVD · 54

CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*up to 23.0.1271.62VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:*23.0.1271.0VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:*23.0.1271.1VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:*23.0.1271.2VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:*23.0.1271.3VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:*23.0.1271.4VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:*23.0.1271.5VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:*23.0.1271.6VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:*23.0.1271.7VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:*23.0.1271.8VulnerableGoogle
  • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 23.0.1271.62 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.0:*:*:*:*:*:*:* Versions 23.0.1271.0 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.1:*:*:*:*:*:*:* Versions 23.0.1271.1 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.2:*:*:*:*:*:*:* Versions 23.0.1271.2 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.3:*:*:*:*:*:*:* Versions 23.0.1271.3 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.4:*:*:*:*:*:*:* Versions 23.0.1271.4 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.5:*:*:*:*:*:*:* Versions 23.0.1271.5 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.6:*:*:*:*:*:*:* Versions 23.0.1271.6 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.7:*:*:*:*:*:*:* Versions 23.0.1271.7 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.8:*:*:*:*:*:*:* Versions 23.0.1271.8 Vulnerable ·Google
Show 44 more CPE
CPEVersionsRoleVendor
cpe:2.3:a:google:chrome:23.0.1271.9:*:*:*:*:*:*:*23.0.1271.9VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.10:*:*:*:*:*:*:*23.0.1271.10VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.11:*:*:*:*:*:*:*23.0.1271.11VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.12:*:*:*:*:*:*:*23.0.1271.12VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.13:*:*:*:*:*:*:*23.0.1271.13VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.14:*:*:*:*:*:*:*23.0.1271.14VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.15:*:*:*:*:*:*:*23.0.1271.15VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.16:*:*:*:*:*:*:*23.0.1271.16VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.17:*:*:*:*:*:*:*23.0.1271.17VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.18:*:*:*:*:*:*:*23.0.1271.18VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.19:*:*:*:*:*:*:*23.0.1271.19VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.20:*:*:*:*:*:*:*23.0.1271.20VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.21:*:*:*:*:*:*:*23.0.1271.21VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.22:*:*:*:*:*:*:*23.0.1271.22VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.23:*:*:*:*:*:*:*23.0.1271.23VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.24:*:*:*:*:*:*:*23.0.1271.24VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.26:*:*:*:*:*:*:*23.0.1271.26VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.30:*:*:*:*:*:*:*23.0.1271.30VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.31:*:*:*:*:*:*:*23.0.1271.31VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.32:*:*:*:*:*:*:*23.0.1271.32VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.33:*:*:*:*:*:*:*23.0.1271.33VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.35:*:*:*:*:*:*:*23.0.1271.35VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.36:*:*:*:*:*:*:*23.0.1271.36VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.37:*:*:*:*:*:*:*23.0.1271.37VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.38:*:*:*:*:*:*:*23.0.1271.38VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.39:*:*:*:*:*:*:*23.0.1271.39VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.40:*:*:*:*:*:*:*23.0.1271.40VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.41:*:*:*:*:*:*:*23.0.1271.41VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.44:*:*:*:*:*:*:*23.0.1271.44VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.45:*:*:*:*:*:*:*23.0.1271.45VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.46:*:*:*:*:*:*:*23.0.1271.46VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.49:*:*:*:*:*:*:*23.0.1271.49VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.50:*:*:*:*:*:*:*23.0.1271.50VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.51:*:*:*:*:*:*:*23.0.1271.51VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.52:*:*:*:*:*:*:*23.0.1271.52VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.53:*:*:*:*:*:*:*23.0.1271.53VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.54:*:*:*:*:*:*:*23.0.1271.54VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.55:*:*:*:*:*:*:*23.0.1271.55VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.56:*:*:*:*:*:*:*23.0.1271.56VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.57:*:*:*:*:*:*:*23.0.1271.57VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.58:*:*:*:*:*:*:*23.0.1271.58VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.59:*:*:*:*:*:*:*23.0.1271.59VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.60:*:*:*:*:*:*:*23.0.1271.60VulnerableGoogle
cpe:2.3:a:google:chrome:23.0.1271.61:*:*:*:*:*:*:*23.0.1271.61VulnerableGoogle
  • cpe:2.3:a:google:chrome:23.0.1271.9:*:*:*:*:*:*:* Versions 23.0.1271.9 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.10:*:*:*:*:*:*:* Versions 23.0.1271.10 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.11:*:*:*:*:*:*:* Versions 23.0.1271.11 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.12:*:*:*:*:*:*:* Versions 23.0.1271.12 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.13:*:*:*:*:*:*:* Versions 23.0.1271.13 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.14:*:*:*:*:*:*:* Versions 23.0.1271.14 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.15:*:*:*:*:*:*:* Versions 23.0.1271.15 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.16:*:*:*:*:*:*:* Versions 23.0.1271.16 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.17:*:*:*:*:*:*:* Versions 23.0.1271.17 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.18:*:*:*:*:*:*:* Versions 23.0.1271.18 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.19:*:*:*:*:*:*:* Versions 23.0.1271.19 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.20:*:*:*:*:*:*:* Versions 23.0.1271.20 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.21:*:*:*:*:*:*:* Versions 23.0.1271.21 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.22:*:*:*:*:*:*:* Versions 23.0.1271.22 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.23:*:*:*:*:*:*:* Versions 23.0.1271.23 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.24:*:*:*:*:*:*:* Versions 23.0.1271.24 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.26:*:*:*:*:*:*:* Versions 23.0.1271.26 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.30:*:*:*:*:*:*:* Versions 23.0.1271.30 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.31:*:*:*:*:*:*:* Versions 23.0.1271.31 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.32:*:*:*:*:*:*:* Versions 23.0.1271.32 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.33:*:*:*:*:*:*:* Versions 23.0.1271.33 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.35:*:*:*:*:*:*:* Versions 23.0.1271.35 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.36:*:*:*:*:*:*:* Versions 23.0.1271.36 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.37:*:*:*:*:*:*:* Versions 23.0.1271.37 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.38:*:*:*:*:*:*:* Versions 23.0.1271.38 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.39:*:*:*:*:*:*:* Versions 23.0.1271.39 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.40:*:*:*:*:*:*:* Versions 23.0.1271.40 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.41:*:*:*:*:*:*:* Versions 23.0.1271.41 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.44:*:*:*:*:*:*:* Versions 23.0.1271.44 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.45:*:*:*:*:*:*:* Versions 23.0.1271.45 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.46:*:*:*:*:*:*:* Versions 23.0.1271.46 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.49:*:*:*:*:*:*:* Versions 23.0.1271.49 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.50:*:*:*:*:*:*:* Versions 23.0.1271.50 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.51:*:*:*:*:*:*:* Versions 23.0.1271.51 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.52:*:*:*:*:*:*:* Versions 23.0.1271.52 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.53:*:*:*:*:*:*:* Versions 23.0.1271.53 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.54:*:*:*:*:*:*:* Versions 23.0.1271.54 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.55:*:*:*:*:*:*:* Versions 23.0.1271.55 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.56:*:*:*:*:*:*:* Versions 23.0.1271.56 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.57:*:*:*:*:*:*:* Versions 23.0.1271.57 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.58:*:*:*:*:*:*:* Versions 23.0.1271.58 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.59:*:*:*:*:*:*:* Versions 23.0.1271.59 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.60:*:*:*:*:*:*:* Versions 23.0.1271.60 Vulnerable ·Google
  • cpe:2.3:a:google:chrome:23.0.1271.61:*:*:*:*:*:*:* Versions 23.0.1271.61 Vulnerable ·Google

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2012-5122
  2. 2026-10-03 Alias added: GHSA-m4w6-44xh-crf6

References

  • TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
  • TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
  • TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
See all 7586 →

Sources