CVE-2015-1213
HighSummary
The SkBitmap::ReadRawPixels function in Skia, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
Risk Assessment
This vulnerability may lead to denial of service, affecting application availability and potentially being exploited by attackers to disrupt system operations.
Recommendation
It is recommended to update Google Chrome to version 41.0.2272.76 or later to mitigate this vulnerability.
Other vulnerabilities in Skia w Google Chrome
See all- CVE-2015-1238High
Skia, as used in Google Chrome before version 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
- CVE-2015-1214High
Integer overflow in the SkAutoSTArray implementation in Skia, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.
Original NVD description (English source)
The SkBitmap::ReadRawPixels function in core/SkBitmap.cpp in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.