CVE-2014-1710
published 2014-03-16CVE-2014-1710: The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before…
PriorityP429high7.5CVSS 2.0
AVNACLAuNCPIPAP
EPSS
1.09%
61.4th percentile
The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.
Affected
11 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| chrome_os | <= 33.0.1750.149 | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — | |
| chrome_os | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.htmlhttps://code.google.com/p/chromium/issues/detail?id=351852https://src.chromium.org/viewvc/chrome?revision=256723&view=revisionhttps://src.chromium.org/viewvc/chrome?revision=256918&view=revisionhttp://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.htmlhttps://code.google.com/p/chromium/issues/detail?id=351852https://src.chromium.org/viewvc/chrome?revision=256723&view=revisionhttps://src.chromium.org/viewvc/chrome?revision=256918&view=revision
2014-03-16
Published