7.5

CVE-2014-3157: google chrome

CVSS: 7.5v2.0HighModified
AliasesUBUNTU-CVE-2014-3157
Published 11-06-2014Last modified 06-08-2024
Open JSON

Vulnerability summary

CVE-2014-3157 is a high (CVSS 7.5) vulnerability in google chrome. EPSS estimates a 1.83% chance of exploitation in the next 30 days, higher than 78.5% of scored vulnerabilities.

Overall risk
30/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.5/10
010
High · v2.0 (NVD)
EPSS score
1.83%
0%100%
Low · +0.07 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 4 · Related 3
DSA-2959-1OPENSUSE-SU-2024:10171-1OPENSUSE-SU-2024:12948-1USN-2298-1

Timeline

  1. 11-06-2014
    PublishedVulnerability first disclosed.
  2. 06-08-2024
    Last modifiedVulnerability information updated.

Description

Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.

CVSS metrics

1 score · 1 source · 1 version

EPSS trend

Probability

1.83%

Chance of exploitation in the next 30 days

Percentile

79%

Versus all other CVEs

30-day change

+0.07 pp

From 1.76% on 19-09-2026

19-09-202619-10-2026
EPSS score
1.83%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Ubuntu2 products
  • chromium-browser< 36.0.1985.125-0ubuntu1.14.04.0~pkg1029
  • oxide-qt< 1.0.4-0ubuntu0.14.04.1
Google1 product
  • chromeEOL≤ 35.0.1916.152 | 35.0.1916.0 | 35.0.1916.1 | 35.0.1916.2 | 35.0.1916.3 | 35.0.1916.4 | 35.0.1916.5 | 35.0.1916.6 | 35.0.1916.7 | 35.0.1916.8 | 35.0.1916.9 | 35.0.1916.10 | 35.0.1916.11 | 35.0.1916.13 | 35.0.1916.14 | 35.0.1916.15 | 35.0.1916.17 | 35.0.1916.18 | 35.0.1916.19 | 35.0.1916.20 | 35.0.1916.21 | 35.0.1916.22 | 35.0.1916.23 | 35.0.1916.27 | 35.0.1916.31 | 35.0.1916.32 | 35.0.1916.33 | 35.0.1916.34 | 35.0.1916.35 | 35.0.1916.36 | 35.0.1916.37 | 35.0.1916.38 | 35.0.1916.39 | 35.0.1916.40 | 35.0.1916.41 | 35.0.1916.42 | 35.0.1916.43 | 35.0.1916.44 | 35.0.1916.45 | 35.0.1916.46 | 35.0.1916.47 | 35.0.1916.48 | 35.0.1916.49 | 35.0.1916.51 | 35.0.1916.52 | 35.0.1916.54 | 35.0.1916.56 | 35.0.1916.57 | 35.0.1916.59 | 35.0.1916.61 | 35.0.1916.68 | 35.0.1916.69 | 35.0.1916.71 | 35.0.1916.72 | 35.0.1916.74 | 35.0.1916.77 | 35.0.1916.80 | 35.0.1916.82 | 35.0.1916.84 | 35.0.1916.85 | 35.0.1916.86 | 35.0.1916.88 | 35.0.1916.90 | 35.0.1916.92 | 35.0.1916.93 | 35.0.1916.95 | 35.0.1916.96 | 35.0.1916.98 | 35.0.1916.99 | 35.0.1916.101 | 35.0.1916.103 | 35.0.1916.104 | 35.0.1916.105 | 35.0.1916.106 | 35.0.1916.107 | 35.0.1916.108 | 35.0.1916.109 | 35.0.1916.110 | 35.0.1916.111 | 35.0.1916.112 | 35.0.1916.113 | 35.0.1916.114 | 35.0.1916.115 | 35.0.1916.116 | 35.0.1916.117 | 35.0.1916.118 | 35.0.1916.119 | 35.0.1916.120 | 35.0.1916.121 | 35.0.1916.122 | 35.0.1916.123 | 35.0.1916.124 | 35.0.1916.125 | 35.0.1916.126 | 35.0.1916.127 | 35.0.1916.128 | 35.0.1916.137 | 35.0.1916.138 | 35.0.1916.140 | 35.0.1916.141 | 35.0.1916.142 | 35.0.1916.149 | 35.0.1916.150 | 35.0.1916.151

2 vendors · 3 products

References

13 links
Show all 13 references