CVE-2017-5014 — Improper Restriction of Operations within the Bounds of a Memory Buffer in Google Chrome

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer8 documents6 sources
Severity
6.3MEDIUMNVD
OSV6.1
EPSS
0.8%
top 25.32%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Google Chrome
Timeline
PublishedFeb 17
Latest updateMay 14

Description

Heap buffer overflow during image processing in Skia in Google Chrome prior to 56.0.2924.76 for Linux, Windows and Mac, and 56.0.2924.87 for Android, allowed a remote attacker to perform an out of bounds memory read via a crafted HTML page.

CVSS vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages1 packages

▶NVDgoogle/chrome55.0.2883.87

🔴Vulnerability Details

3
GHSA
GHSA-g7j5-4hm3-97g5: Heap buffer overflow during image processing in Skia in Google Chrome prior to 56↗2022-05-14
▶
OSV
oxide-qt vulnerabilities↗2017-02-08
▶
OSV
CVE-2017-5014: Heap buffer overflow during image processing in Skia in Google Chrome prior to 56↗2017-01-27
▶

📋Vendor Advisories

2
Ubuntu
Oxide vulnerabilities↗2017-02-08
▶
Red Hat
chromium-browser: heap overflow in skia↗2017-01-25
▶

💬Community

2
Bugzilla
CVE-2017-5014 chromium-browser: heap overflow in skia↗2017-01-26
▶
Bugzilla
chromium: various flaws [fedora-all]↗2017-01-26
▶