CVE-2012-2819
published 2012-06-27CVE-2012-2819: The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which…
PriorityP422medium6.8CVSS 2.0
AVNACMAuNCPIPAP
EPSS
0.99%
59.0th percentile
The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.
Affected
43 ranges· showing 25
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome | <= 20.0.1132.42 | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — | |
| chrome | — | — |
CVSS provenance
nvdv2.06.8MEDIUMAV:N/AC:M/Au:N/C:P/I:P/A:P
osv6.8MEDIUM
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-9g98-h4p4-9795: The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20
ghsa_unreviewed·2022-05-17
CVE-2012-2819 [MEDIUM] CWE-20 GHSA-9g98-h4p4-9795: The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20
The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.
OSV
CVE-2012-2819: The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20
osv·2012-06-27·CVSS 6.8
CVE-2012-2819 [MEDIUM] CVE-2012-2819: The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20
The texSubImage2D implementation in the WebGL subsystem in Google Chrome before 20.0.1132.43 does not properly handle uploads to floating-point textures, which allows remote attackers to cause a denial of service (assertion failure and application crash) or possibly have unspecified other impact via a crafted web page, as demonstrated by certain WebGL performance tests, aka rdar problem 11520387.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://code.google.com/p/chromium/issues/detail?id=120977http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.htmlhttp://trac.webkit.org/changeset/117191http://trac.webkit.org/changeset/118410https://bugs.webkit.org/show_bug.cgi?id=85942https://chromiumcodereview.appspot.com/10444013https://hermes.opensuse.org/messages/15075728https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14938http://code.google.com/p/chromium/issues/detail?id=120977http://googlechromereleases.blogspot.com/2012/06/stable-channel-update_26.htmlhttp://trac.webkit.org/changeset/117191http://trac.webkit.org/changeset/118410https://bugs.webkit.org/show_bug.cgi?id=85942https://chromiumcodereview.appspot.com/10444013https://hermes.opensuse.org/messages/15075728https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14938
2012-06-27
Published