What is CVE-2012-5145?

CVE-2012-5145 is a vulnerability in Google Chrome, classified under Use After Free. Published 2013-01-15.

Is CVE-2012-5145 known to be exploited?

8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Use After Free in Google Chrome

CVE-2012-5145

Use-after-free vulnerability in Google Chrome before 24.0.1312.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to SVG layout.

Vulnerability class: Use-After-Free

Published 2013-01-15 · last modified 2026-06-16.

CVSS v2 metric

CVSS v2 base score 7.5 (High). Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P. This CVE predates CVSS v3 and has no v3 score from NVD.

EPSS exploit prediction

EPSS: 0.013 (68.7th percentile), scored 2026-10-07.

Low probability of exploitation in the next 30 days, but still tracked. 69th percentile — 68.7% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.

EPSS over last 30 days · oldest: 0.013 · newest: 0.013 · change: 0.000

Affected products

Google Chrome — versions 24.0.1272.0, 24.0.1272.1, 24.0.1273.0
openSUSE — versions 12.1, 12.2

Weakness classification (CWE)

CWE-416 — Use After Free

Public proof-of-concept exploits

References

code.google.com/p/chromium/issues/detail
lists.opensuse.org/opensuse-updates/2013-02/msg00005.html (vendor-advisory)
oval.cisecurity.org/repository/search/definition/oval:org.mitre.oval:def:16207 (signature, vdb-entry)
googlechromereleases.blogspot.com/2013/01/stable-channel-update.html

Frequently asked questions

What is CVE-2012-5145?: CVE-2012-5145 is a vulnerability in Google Chrome, classified under Use After Free. Published 2013-01-15.
Is CVE-2012-5145 known to be exploited?: 8 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.