CVE-2014-1744Google Chrome vulnerability

CWE-1895 documents4 sources
Severity
7.5HIGHNVD
OSV7.8
EPSS
1.7%
top 17.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedMay 21
Latest updateMay 14

Description

Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host.cc in Google Chrome before 35.0.1916.114 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a large shared-memory allocation.

CVSS vector

AV:N/AC:L/C:P/I:P/A:PExploitability: 10.0 | Impact: 6.4

Affected Packages1 packages

NVDgoogle/chrome35.0.1916.113+79

🔴Vulnerability Details

3
GHSA
GHSA-4gc6-9xr6-qwc7: Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host2022-05-14
OSV
oxide-qt vulnerabilities2014-07-23
OSV
CVE-2014-1744: Integer overflow in the AudioInputRendererHost::OnCreateStream function in content/browser/renderer_host/media/audio_input_renderer_host2014-05-21

📋Vendor Advisories

1
Ubuntu
Oxide vulnerabilities2014-07-23