CVE-2012-5118

Google Chrome < 23.0.1271.64 - Denial of Service via GPU Command Buffer Integer Validation

Title source: llm

Description

Google Chrome before 23.0.1271.64 on Mac OS X does not properly validate an integer value during the handling of GPU command buffers, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.

References (5)

Core 5

Core References

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/56413

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/79865

Release Notes, Vendor Advisory x_refsource_confirm

http://googlechromereleases.blogspot.com/2012/11/stable-channel-release-and-beta-channel.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://osvdb.org/87074

Issue Tracking x_refsource_confirm

https://code.google.com/p/chromium/issues/detail?id=149717

Scores

EPSS 0.0127

EPSS Percentile 66.5%

Details

CWE

CWE-20

Status published

Products (50)

google/chrome 23.0.1271.0

google/chrome 23.0.1271.1

google/chrome 23.0.1271.2

google/chrome 23.0.1271.3

google/chrome 23.0.1271.4

google/chrome 23.0.1271.5

google/chrome 23.0.1271.6

google/chrome 23.0.1271.7

google/chrome 23.0.1271.8

google/chrome 23.0.1271.9

... and 40 more

Published Nov 07, 2012

Tracked Since Feb 18, 2026