CVEvulnerability

CVE-2014-3174

5.0 MEDIUM Published 2014-08-27 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2014-08-27
Last modified
2026-06-17
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
Weaknesses
CWE-119

Description

modules/webaudio/BiquadDSPKernel.cpp in the Web Audio API implementation in Blink, as used in Google Chrome before 37.0.2062.94, does not properly consider concurrent threads during attempts to update biquad filter coefficients, which allows remote attackers to cause a denial of service (read of uninitialized memory) via crafted API calls.

Affected configurations

• google chrome (<= 37.0.2062.93) • google chrome 37.0.2062.0 • google chrome 37.0.2062.1 • google chrome 37.0.2062.2 • google chrome 37.0.2062.3 • google chrome 37.0.2062.4 • google chrome 37.0.2062.5 • google chrome 37.0.2062.6 • google chrome 37.0.2062.7 • google chrome 37.0.2062.8 • google chrome 37.0.2062.9 • google chrome 37.0.2062.10 • google chrome 37.0.2062.11 • google chrome 37.0.2062.12 • google chrome 37.0.2062.13 • google chrome 37.0.2062.14 • google chrome 37.0.2062.15 • google chrome 37.0.2062.16 • google chrome 37.0.2062.17 • google chrome 37.0.2062.18 • google chrome 37.0.2062.19 • google chrome 37.0.2062.20 • google chrome 37.0.2062.21 • google chrome 37.0.2062.22 • google chrome 37.0.2062.23 • google chrome 37.0.2062.24 • google chrome 37.0.2062.25 • google chrome 37.0.2062.26 • google chrome 37.0.2062.27 • google chrome 37.0.2062.28 • google chrome 37.0.2062.29 • google chrome 37.0.2062.30 • google chrome 37.0.2062.31 • google chrome 37.0.2062.32 • google chrome 37.0.2062.33 • google chrome 37.0.2062.34 • google chrome 37.0.2062.35 • google chrome 37.0.2062.36 • google chrome 37.0.2062.37 • google chrome 37.0.2062.39 • google chrome 37.0.2062.43 • google chrome 37.0.2062.44 • google chrome 37.0.2062.45 • google chrome 37.0.2062.46 • google chrome 37.0.2062.47 • google chrome 37.0.2062.48 • google chrome 37.0.2062.49 • google chrome 37.0.2062.50 • google chrome 37.0.2062.51 • google chrome 37.0.2062.52 • google chrome 37.0.2062.53 • google chrome 37.0.2062.54 • google chrome 37.0.2062.55 • google chrome 37.0.2062.56 • google chrome 37.0.2062.57 • google chrome 37.0.2062.58 • google chrome 37.0.2062.59 • google chrome 37.0.2062.60 • google chrome 37.0.2062.61 • google chrome 37.0.2062.62 … and 22 more

Related

Weakness · CWE (1)

  • CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer weakness

References