What is CVE-2014-1710?

CVE-2014-1710 is a vulnerability in Google Chrome OS, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-03-16.

Is CVE-2014-1710 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Buffer overflow in Google Chrome OS

CVE-2014-1710

The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.

Vulnerability class: Buffer Overflow

EPSS: 0.011 (61.9th percentile) — read the EPSS interpretation.

Affected products

Google Chrome_os — versions 33.0.1750.2, 33.0.1750.5, 33.0.1750.16
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

Public proof-of-concept exploits

BushraAloraini/Android-Vulnerabilities

References

chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)
chrome-cve-admin@google.com (x_refsource_CONFIRM)

Frequently asked questions

What is CVE-2014-1710?: CVE-2014-1710 is a vulnerability in Google Chrome OS, classified under Improper Restriction of Operations within the Bounds of a Memory Buffer. Published 2014-03-16.
Is CVE-2014-1710 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.