CVE-2014-3152

v8: integer underflow fixed in Google Chrome 35.0.1916.114

Published May 21, 2014 CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Description
Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
Debian DSA Debian DSA DSA-2939-1 chromium-browser security update
EUVD EUVD EUVD-2014-3170 Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.
Ubuntu USN Ubuntu USN USN-2298-1 Oxide vulnerabilities
History

No history.

Weaknesses

Sources

Status
PUBLISHED
Assigner
Chrome
Published
Updated
Aug 6, 2024, 10:35 AM
Reserved
May 3, 2014, 12:00 AM
Status
Modified
Published
May 21, 2014, 11:14 AM
Modified
Jun 17, 2026, 12:07 AM
Severity
Moderate
Public date
Mar 31, 2014, 12:00 AM