CVE-2014-1710: Buffer Overflow
The AsyncPixelTransfersCompletedQuery::End function in gpu/commandbuffer/service/querymanager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-1710?
CVE-2014-1710 has a severity rating that indicates it could lead to remote code execution due to improper memory checks.
How do I fix CVE-2014-1710?
To fix CVE-2014-1710, update Google Chrome OS to a version later than 33.0.1750.152.
What systems are affected by CVE-2014-1710?
CVE-2014-1710 affects Google Chrome OS versions prior to and including 33.0.1750.152.
Can CVE-2014-1710 be exploited remotely?
Yes, CVE-2014-1710 can be exploited by remote attackers to cause harmful effects on the system.
What is the primary vulnerability found in CVE-2014-1710?
CVE-2014-1710 involves a failure to check memory segment boundaries in the AsyncPixelTransfersCompletedQuery::End function.