CVE-2014-7928

High

Published: 22/01/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The hydrogen.cc file in Google V8, used in Google Chrome before version 40.0.2214.91, has an issue with handling arrays with holes. This can lead to denial of service (memory corruption) or other unspecified impacts via crafted JavaScript code that triggers an array copy.

Risk Assessment

Remote attackers may exploit this vulnerability to disrupt application functionality, potentially leading to service unavailability. Other unspecified threats to the system may also arise.

Recommendation

It is recommended to update Google Chrome to version 40.0.2214.91 or later to mitigate this vulnerability. Regular browser updates are crucial for maintaining security.

Other vulnerabilities in Google V8 w Google Chrome

CVE-2014-7927High
The SimplifiedLowering::DoLoadBuffer function in Google V8, used in Google Chrome before version 40.0.2214.91, does not properly choose an integer data type, which may lead to denial of service (memory corruption) or other unspecified impacts via crafted JavaScript code.

Original NVD description (English source)

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.