Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in…
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- — Not recorded in CVSS 2.0
- Attack complexity
- Low
- Impact type
- Code execution
- Confidentiality · integrity · availability
- Partial · Partial · Partial
- Fix status
- No fix listed
Attack profile from CVSS 2.0 · NVD. Fix status from CNA. Impact type from CWE-119 and the CVSS impact.
Summary
Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.
Why it matters now
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 104
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* | up to 35.0.1916.152 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.0:*:*:*:*:*:*:* | 35.0.1916.0 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.1:*:*:*:*:*:*:* | 35.0.1916.1 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.2:*:*:*:*:*:*:* | 35.0.1916.2 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.3:*:*:*:*:*:*:* | 35.0.1916.3 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.4:*:*:*:*:*:*:* | 35.0.1916.4 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.5:*:*:*:*:*:*:* | 35.0.1916.5 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.6:*:*:*:*:*:*:* | 35.0.1916.6 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.7:*:*:*:*:*:*:* | 35.0.1916.7 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.8:*:*:*:*:*:*:* | 35.0.1916.8 | Vulnerable |
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* Versions up to 35.0.1916.152 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.0:*:*:*:*:*:*:* Versions 35.0.1916.0 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.1:*:*:*:*:*:*:* Versions 35.0.1916.1 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.2:*:*:*:*:*:*:* Versions 35.0.1916.2 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.3:*:*:*:*:*:*:* Versions 35.0.1916.3 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.4:*:*:*:*:*:*:* Versions 35.0.1916.4 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.5:*:*:*:*:*:*:* Versions 35.0.1916.5 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.6:*:*:*:*:*:*:* Versions 35.0.1916.6 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.7:*:*:*:*:*:*:* Versions 35.0.1916.7 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.8:*:*:*:*:*:*:* Versions 35.0.1916.8 Vulnerable ·Google
Show 94 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:google:chrome:35.0.1916.9:*:*:*:*:*:*:* | 35.0.1916.9 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.10:*:*:*:*:*:*:* | 35.0.1916.10 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.11:*:*:*:*:*:*:* | 35.0.1916.11 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.13:*:*:*:*:*:*:* | 35.0.1916.13 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.14:*:*:*:*:*:*:* | 35.0.1916.14 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.15:*:*:*:*:*:*:* | 35.0.1916.15 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.17:*:*:*:*:*:*:* | 35.0.1916.17 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.18:*:*:*:*:*:*:* | 35.0.1916.18 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.19:*:*:*:*:*:*:* | 35.0.1916.19 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.20:*:*:*:*:*:*:* | 35.0.1916.20 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.21:*:*:*:*:*:*:* | 35.0.1916.21 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.22:*:*:*:*:*:*:* | 35.0.1916.22 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.23:*:*:*:*:*:*:* | 35.0.1916.23 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.27:*:*:*:*:*:*:* | 35.0.1916.27 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.31:*:*:*:*:*:*:* | 35.0.1916.31 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.32:*:*:*:*:*:*:* | 35.0.1916.32 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.33:*:*:*:*:*:*:* | 35.0.1916.33 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.34:*:*:*:*:*:*:* | 35.0.1916.34 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.35:*:*:*:*:*:*:* | 35.0.1916.35 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.36:*:*:*:*:*:*:* | 35.0.1916.36 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.37:*:*:*:*:*:*:* | 35.0.1916.37 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.38:*:*:*:*:*:*:* | 35.0.1916.38 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.39:*:*:*:*:*:*:* | 35.0.1916.39 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.40:*:*:*:*:*:*:* | 35.0.1916.40 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.41:*:*:*:*:*:*:* | 35.0.1916.41 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.42:*:*:*:*:*:*:* | 35.0.1916.42 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.43:*:*:*:*:*:*:* | 35.0.1916.43 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.44:*:*:*:*:*:*:* | 35.0.1916.44 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.45:*:*:*:*:*:*:* | 35.0.1916.45 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.46:*:*:*:*:*:*:* | 35.0.1916.46 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.47:*:*:*:*:*:*:* | 35.0.1916.47 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.48:*:*:*:*:*:*:* | 35.0.1916.48 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.49:*:*:*:*:*:*:* | 35.0.1916.49 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.51:*:*:*:*:*:*:* | 35.0.1916.51 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.52:*:*:*:*:*:*:* | 35.0.1916.52 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.54:*:*:*:*:*:*:* | 35.0.1916.54 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.56:*:*:*:*:*:*:* | 35.0.1916.56 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.57:*:*:*:*:*:*:* | 35.0.1916.57 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.59:*:*:*:*:*:*:* | 35.0.1916.59 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.61:*:*:*:*:*:*:* | 35.0.1916.61 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.68:*:*:*:*:*:*:* | 35.0.1916.68 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.69:*:*:*:*:*:*:* | 35.0.1916.69 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.71:*:*:*:*:*:*:* | 35.0.1916.71 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.72:*:*:*:*:*:*:* | 35.0.1916.72 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.74:*:*:*:*:*:*:* | 35.0.1916.74 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.77:*:*:*:*:*:*:* | 35.0.1916.77 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.80:*:*:*:*:*:*:* | 35.0.1916.80 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.82:*:*:*:*:*:*:* | 35.0.1916.82 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.84:*:*:*:*:*:*:* | 35.0.1916.84 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.85:*:*:*:*:*:*:* | 35.0.1916.85 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.86:*:*:*:*:*:*:* | 35.0.1916.86 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.88:*:*:*:*:*:*:* | 35.0.1916.88 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.90:*:*:*:*:*:*:* | 35.0.1916.90 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.92:*:*:*:*:*:*:* | 35.0.1916.92 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.93:*:*:*:*:*:*:* | 35.0.1916.93 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.95:*:*:*:*:*:*:* | 35.0.1916.95 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.96:*:*:*:*:*:*:* | 35.0.1916.96 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.98:*:*:*:*:*:*:* | 35.0.1916.98 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.99:*:*:*:*:*:*:* | 35.0.1916.99 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.101:*:*:*:*:*:*:* | 35.0.1916.101 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.103:*:*:*:*:*:*:* | 35.0.1916.103 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.104:*:*:*:*:*:*:* | 35.0.1916.104 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.105:*:*:*:*:*:*:* | 35.0.1916.105 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.106:*:*:*:*:*:*:* | 35.0.1916.106 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.107:*:*:*:*:*:*:* | 35.0.1916.107 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.108:*:*:*:*:*:*:* | 35.0.1916.108 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.109:*:*:*:*:*:*:* | 35.0.1916.109 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.110:*:*:*:*:*:*:* | 35.0.1916.110 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.111:*:*:*:*:*:*:* | 35.0.1916.111 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.112:*:*:*:*:*:*:* | 35.0.1916.112 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.113:*:*:*:*:*:*:* | 35.0.1916.113 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.114:*:*:*:*:*:*:* | 35.0.1916.114 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.115:*:*:*:*:*:*:* | 35.0.1916.115 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.116:*:*:*:*:*:*:* | 35.0.1916.116 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.117:*:*:*:*:*:*:* | 35.0.1916.117 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.118:*:*:*:*:*:*:* | 35.0.1916.118 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.119:*:*:*:*:*:*:* | 35.0.1916.119 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.120:*:*:*:*:*:*:* | 35.0.1916.120 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.121:*:*:*:*:*:*:* | 35.0.1916.121 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.122:*:*:*:*:*:*:* | 35.0.1916.122 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.123:*:*:*:*:*:*:* | 35.0.1916.123 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.124:*:*:*:*:*:*:* | 35.0.1916.124 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.125:*:*:*:*:*:*:* | 35.0.1916.125 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.126:*:*:*:*:*:*:* | 35.0.1916.126 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.127:*:*:*:*:*:*:* | 35.0.1916.127 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.128:*:*:*:*:*:*:* | 35.0.1916.128 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.137:*:*:*:*:*:*:* | 35.0.1916.137 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.138:*:*:*:*:*:*:* | 35.0.1916.138 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.140:*:*:*:*:*:*:* | 35.0.1916.140 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.141:*:*:*:*:*:*:* | 35.0.1916.141 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.142:*:*:*:*:*:*:* | 35.0.1916.142 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.149:*:*:*:*:*:*:* | 35.0.1916.149 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.150:*:*:*:*:*:*:* | 35.0.1916.150 | Vulnerable | |
| cpe:2.3:a:google:chrome:35.0.1916.151:*:*:*:*:*:*:* | 35.0.1916.151 | Vulnerable |
- cpe:2.3:a:google:chrome:35.0.1916.9:*:*:*:*:*:*:* Versions 35.0.1916.9 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.10:*:*:*:*:*:*:* Versions 35.0.1916.10 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.11:*:*:*:*:*:*:* Versions 35.0.1916.11 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.13:*:*:*:*:*:*:* Versions 35.0.1916.13 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.14:*:*:*:*:*:*:* Versions 35.0.1916.14 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.15:*:*:*:*:*:*:* Versions 35.0.1916.15 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.17:*:*:*:*:*:*:* Versions 35.0.1916.17 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.18:*:*:*:*:*:*:* Versions 35.0.1916.18 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.19:*:*:*:*:*:*:* Versions 35.0.1916.19 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.20:*:*:*:*:*:*:* Versions 35.0.1916.20 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.21:*:*:*:*:*:*:* Versions 35.0.1916.21 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.22:*:*:*:*:*:*:* Versions 35.0.1916.22 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.23:*:*:*:*:*:*:* Versions 35.0.1916.23 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.27:*:*:*:*:*:*:* Versions 35.0.1916.27 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.31:*:*:*:*:*:*:* Versions 35.0.1916.31 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.32:*:*:*:*:*:*:* Versions 35.0.1916.32 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.33:*:*:*:*:*:*:* Versions 35.0.1916.33 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.34:*:*:*:*:*:*:* Versions 35.0.1916.34 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.35:*:*:*:*:*:*:* Versions 35.0.1916.35 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.36:*:*:*:*:*:*:* Versions 35.0.1916.36 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.37:*:*:*:*:*:*:* Versions 35.0.1916.37 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.38:*:*:*:*:*:*:* Versions 35.0.1916.38 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.39:*:*:*:*:*:*:* Versions 35.0.1916.39 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.40:*:*:*:*:*:*:* Versions 35.0.1916.40 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.41:*:*:*:*:*:*:* Versions 35.0.1916.41 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.42:*:*:*:*:*:*:* Versions 35.0.1916.42 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.43:*:*:*:*:*:*:* Versions 35.0.1916.43 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.44:*:*:*:*:*:*:* Versions 35.0.1916.44 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.45:*:*:*:*:*:*:* Versions 35.0.1916.45 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.46:*:*:*:*:*:*:* Versions 35.0.1916.46 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.47:*:*:*:*:*:*:* Versions 35.0.1916.47 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.48:*:*:*:*:*:*:* Versions 35.0.1916.48 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.49:*:*:*:*:*:*:* Versions 35.0.1916.49 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.51:*:*:*:*:*:*:* Versions 35.0.1916.51 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.52:*:*:*:*:*:*:* Versions 35.0.1916.52 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.54:*:*:*:*:*:*:* Versions 35.0.1916.54 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.56:*:*:*:*:*:*:* Versions 35.0.1916.56 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.57:*:*:*:*:*:*:* Versions 35.0.1916.57 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.59:*:*:*:*:*:*:* Versions 35.0.1916.59 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.61:*:*:*:*:*:*:* Versions 35.0.1916.61 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.68:*:*:*:*:*:*:* Versions 35.0.1916.68 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.69:*:*:*:*:*:*:* Versions 35.0.1916.69 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.71:*:*:*:*:*:*:* Versions 35.0.1916.71 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.72:*:*:*:*:*:*:* Versions 35.0.1916.72 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.74:*:*:*:*:*:*:* Versions 35.0.1916.74 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.77:*:*:*:*:*:*:* Versions 35.0.1916.77 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.80:*:*:*:*:*:*:* Versions 35.0.1916.80 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.82:*:*:*:*:*:*:* Versions 35.0.1916.82 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.84:*:*:*:*:*:*:* Versions 35.0.1916.84 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.85:*:*:*:*:*:*:* Versions 35.0.1916.85 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.86:*:*:*:*:*:*:* Versions 35.0.1916.86 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.88:*:*:*:*:*:*:* Versions 35.0.1916.88 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.90:*:*:*:*:*:*:* Versions 35.0.1916.90 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.92:*:*:*:*:*:*:* Versions 35.0.1916.92 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.93:*:*:*:*:*:*:* Versions 35.0.1916.93 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.95:*:*:*:*:*:*:* Versions 35.0.1916.95 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.96:*:*:*:*:*:*:* Versions 35.0.1916.96 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.98:*:*:*:*:*:*:* Versions 35.0.1916.98 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.99:*:*:*:*:*:*:* Versions 35.0.1916.99 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.101:*:*:*:*:*:*:* Versions 35.0.1916.101 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.103:*:*:*:*:*:*:* Versions 35.0.1916.103 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.104:*:*:*:*:*:*:* Versions 35.0.1916.104 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.105:*:*:*:*:*:*:* Versions 35.0.1916.105 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.106:*:*:*:*:*:*:* Versions 35.0.1916.106 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.107:*:*:*:*:*:*:* Versions 35.0.1916.107 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.108:*:*:*:*:*:*:* Versions 35.0.1916.108 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.109:*:*:*:*:*:*:* Versions 35.0.1916.109 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.110:*:*:*:*:*:*:* Versions 35.0.1916.110 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.111:*:*:*:*:*:*:* Versions 35.0.1916.111 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.112:*:*:*:*:*:*:* Versions 35.0.1916.112 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.113:*:*:*:*:*:*:* Versions 35.0.1916.113 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.114:*:*:*:*:*:*:* Versions 35.0.1916.114 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.115:*:*:*:*:*:*:* Versions 35.0.1916.115 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.116:*:*:*:*:*:*:* Versions 35.0.1916.116 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.117:*:*:*:*:*:*:* Versions 35.0.1916.117 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.118:*:*:*:*:*:*:* Versions 35.0.1916.118 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.119:*:*:*:*:*:*:* Versions 35.0.1916.119 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.120:*:*:*:*:*:*:* Versions 35.0.1916.120 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.121:*:*:*:*:*:*:* Versions 35.0.1916.121 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.122:*:*:*:*:*:*:* Versions 35.0.1916.122 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.123:*:*:*:*:*:*:* Versions 35.0.1916.123 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.124:*:*:*:*:*:*:* Versions 35.0.1916.124 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.125:*:*:*:*:*:*:* Versions 35.0.1916.125 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.126:*:*:*:*:*:*:* Versions 35.0.1916.126 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.127:*:*:*:*:*:*:* Versions 35.0.1916.127 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.128:*:*:*:*:*:*:* Versions 35.0.1916.128 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.137:*:*:*:*:*:*:* Versions 35.0.1916.137 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.138:*:*:*:*:*:*:* Versions 35.0.1916.138 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.140:*:*:*:*:*:*:* Versions 35.0.1916.140 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.141:*:*:*:*:*:*:* Versions 35.0.1916.141 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.142:*:*:*:*:*:*:* Versions 35.0.1916.142 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.149:*:*:*:*:*:*:* Versions 35.0.1916.149 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.150:*:*:*:*:*:*:* Versions 35.0.1916.150 Vulnerable ·Google
- cpe:2.3:a:google:chrome:35.0.1916.151:*:*:*:*:*:*:* Versions 35.0.1916.151 Vulnerable ·Google
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2014-3157
- 2026-10-03 Alias added: GHSA-xrpx-wqmr-pmxg
References
More Google Chrome vulnerabilities
- TI-2025-09686 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.8
- TI-2024-07390 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04898 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04600 Type confusion in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2024-04346 Use after free in Google Chrome KEVCVSS 3.1CRITICAL 9.6
- TI-2023-05824 Integer overflow in Google Chrome KEVCVSS 3.1CRITICAL 9.6
Sources
- CVE-2014-3157 · CVE Program
- CVE-2014-3157 · NVD
- FIRST EPSS
- GHSA-xrpx-wqmr-pmxg · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences