CVEvulnerability

CVE-2014-3157

7.5 HIGH Published 2014-06-11 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-06-11
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Weaknesses
CWE-119

Description

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.

Affected configurations

• google chrome (<= 35.0.1916.152) • google chrome 35.0.1916.0 • google chrome 35.0.1916.1 • google chrome 35.0.1916.2 • google chrome 35.0.1916.3 • google chrome 35.0.1916.4 • google chrome 35.0.1916.5 • google chrome 35.0.1916.6 • google chrome 35.0.1916.7 • google chrome 35.0.1916.8 • google chrome 35.0.1916.9 • google chrome 35.0.1916.10 • google chrome 35.0.1916.11 • google chrome 35.0.1916.13 • google chrome 35.0.1916.14 • google chrome 35.0.1916.15 • google chrome 35.0.1916.17 • google chrome 35.0.1916.18 • google chrome 35.0.1916.19 • google chrome 35.0.1916.20 • google chrome 35.0.1916.21 • google chrome 35.0.1916.22 • google chrome 35.0.1916.23 • google chrome 35.0.1916.27 • google chrome 35.0.1916.31 • google chrome 35.0.1916.32 • google chrome 35.0.1916.33 • google chrome 35.0.1916.34 • google chrome 35.0.1916.35 • google chrome 35.0.1916.36 • google chrome 35.0.1916.37 • google chrome 35.0.1916.38 • google chrome 35.0.1916.39 • google chrome 35.0.1916.40 • google chrome 35.0.1916.41 • google chrome 35.0.1916.42 • google chrome 35.0.1916.43 • google chrome 35.0.1916.44 • google chrome 35.0.1916.45 • google chrome 35.0.1916.46 • google chrome 35.0.1916.47 • google chrome 35.0.1916.48 • google chrome 35.0.1916.49 • google chrome 35.0.1916.51 • google chrome 35.0.1916.52 • google chrome 35.0.1916.54 • google chrome 35.0.1916.56 • google chrome 35.0.1916.57 • google chrome 35.0.1916.59 • google chrome 35.0.1916.61 • google chrome 35.0.1916.68 • google chrome 35.0.1916.69 • google chrome 35.0.1916.71 • google chrome 35.0.1916.72 • google chrome 35.0.1916.74 • google chrome 35.0.1916.77 • google chrome 35.0.1916.80 • google chrome 35.0.1916.82 • google chrome 35.0.1916.84 • google chrome 35.0.1916.85 … and 44 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References