CVE-2013-0843
Google Chrome < 24.0.1312.56 - Memory Corruption via WebRTC Audio Renderer Buffer Overflow
Title source: llmDescription
content/renderer/media/webrtc_audio_renderer.cc in Google Chrome before 24.0.1312.56 on Mac OS X does not use an appropriate buffer size for the 96 kHz sampling rate, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a web site that provides WebRTC audio.
References (5)
Core 5
Core References
Patch x_refsource_confirm
http://src.chromium.org/viewvc/chrome/trunk/src/content/renderer/media/webrtc_audio_renderer.cc?r1=175323&r2=175322&pathrev=175323
Patch x_refsource_confirm
https://codereview.chromium.org/11773017
Patch x_refsource_confirm
http://src.chromium.org/viewvc/chrome?view=rev&revision=175323
Release Notes, Vendor Advisory x_refsource_confirm
http://googlechromereleases.blogspot.com/2013/01/stable-channel-update_22.html
Issue Tracking x_refsource_confirm
https://code.google.com/p/chromium/issues/detail?id=166523
Scores
EPSS
0.0127
EPSS Percentile
66.5%
Details
CWE
CWE-119
Status
published
Products (50)
google/chrome
24.0.1272.0
google/chrome
24.0.1272.1
google/chrome
24.0.1273.0
google/chrome
24.0.1274.0
google/chrome
24.0.1275.0
google/chrome
24.0.1276.0
google/chrome
24.0.1276.1
google/chrome
24.0.1277.0
google/chrome
24.0.1278.0
google/chrome
24.0.1279.0
... and 40 more
Published
Jan 24, 2013
Tracked Since
Feb 18, 2026