CVE-2015-1214
HighSummary
Integer overflow in the SkAutoSTArray implementation in Skia, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.
Risk Assessment
This vulnerability may lead to denial of service, affecting application availability and potentially creating other unspecified risks to the system.
Recommendation
It is recommended to update Google Chrome to version 41.0.2272.76 or later to mitigate this vulnerability.
Other vulnerabilities in Skia w Google Chrome
See all- CVE-2015-1238High
Skia, as used in Google Chrome before version 42.0.2311.90, allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact via unknown vectors.
- CVE-2015-1213High
The SkBitmap::ReadRawPixels function in Skia, used in Google Chrome before version 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger an out-of-bounds write operation.
Original NVD description (English source)
Integer overflow in the SkAutoSTArray implementation in include/core/SkTemplates.h in the filters implementation in Skia, as used in Google Chrome before 41.0.2272.76, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a reset action with a large count value, leading to an out-of-bounds write operation.