CVE-2014-7928 PUBLISHED

hydrogen.cc in Google V8, as used Google Chrome before 40.0.2214.91, does not properly handle arrays with holes, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code that triggers an array copy.

EPSS 3.16% · 86.8th percentile

Risk Scores

EPSS Score
3.16%
86.8th percentile

Affected Products

VendorProductVersions
Ubuntu:16.04:LTSlibv8-3.143.14.5.8-5ubuntu2, 0
Ubuntu:18.04:LTSlibv8-3.143.14.5.8-11ubuntu1, 0
Ubuntu:14.04:LTSchromium-browser33.0.1750.152-0ubuntu1~pkg995.1, 34.0.1847.116-0ubuntu2, 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
Ubuntu:14.04:LTSoxide-qt1.0.0~bzr490-0ubuntu1, 1.0.0~bzr501-0ubuntu1, 1.0.0~bzr501-0ubuntu2

Timeline

References

Open in Interactive Console →