CVE-2014-7927

High

Published: 22/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The SimplifiedLowering::DoLoadBuffer function in Google V8, used in Google Chrome before version 40.0.2214.91, does not properly choose an integer data type, which may lead to denial of service (memory corruption) or other unspecified impacts via crafted JavaScript code.

Risk Assessment

Remote attackers may exploit this vulnerability to disrupt application functionality, potentially leading to service availability loss within the organization.

Recommendation

It is recommended to update Google Chrome to the latest version to mitigate this vulnerability and to monitor applications for suspicious activities.

Other vulnerabilities in Google V8 w Google Chrome

CVE-2014-7928High
The hydrogen.cc file in Google V8, used in Google Chrome before version 40.0.2214.91, has an issue with handling arrays with holes. This can lead to denial of service (memory corruption) or other unspecified impacts via crafted JavaScript code that triggers an array copy.

Original NVD description (English source)

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.