Vulnetix
Try Vulnetix Request Demo
CVE-2014-3195 PUBLISHED

Google V8, as used in Google Chrome before 38.0.2125.101, does not properly track JavaScript heap-memory allocations as allocations of uninitialized memory and does not properly concatenate arrays of double-precision floating-point numbers, which allows remote attackers to obtain sensitive information via crafted JavaScript code, related to the PagedSpace::AllocateRaw and NewSpace::AllocateRaw functions in heap/spaces-inl.h, the LargeObjectSpace::AllocateRaw function in heap/spaces.cc, and the Runtime_ArrayConcat function in runtime.cc.

EPSS 0.49% · 65.4th percentile

Risk Scores

EPSS Score
0.49%
65.4th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibv8-3.140, 3.14.5.8-5ubuntu2
Ubuntu:14.04:LTSchromium-browser31.0.1650.63-0ubuntu1~20131204.1, 32.0.1700.107-0ubuntu1~20140204.977.1, 33.0.1750.152-0ubuntu1~pkg995.1
Ubuntu:18.04:LTSlibv8-3.143.14.5.8-11ubuntu1, 0
Ubuntu:14.04:LTSoxide-qt1.0.0~bzr490-0ubuntu1, 1.0.0~bzr501-0ubuntu1, 1.0.0~bzr501-0ubuntu2

Timeline

References

Open in Interactive Console →