CVE-2014-1710 The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain....
HighCVSS 7.5
EPSS 1.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google chrome os | <= 33.0.1750.149 | No fix listed |
| Google chrome os | = 33.0.1750.2 | No fix listed |
| Google chrome os | = 33.0.1750.5 | No fix listed |
| Google chrome os | = 33.0.1750.16 | No fix listed |
| Google chrome os | = 33.0.1750.29 | No fix listed |
| Google chrome os | = 33.0.1750.51 | No fix listed |
| Google chrome os | = 33.0.1750.58 | No fix listed |
| Google chrome os | = 33.0.1750.70 | No fix listed |
| Google chrome os | = 33.0.1750.93 | No fix listed |
| Google chrome os | = 33.0.1750.112 | No fix listed |
| Google chrome os | = 33.0.1750.124 | No fix listed |