CVE Vulnerabilities

CVE-2014-1721

Published: Apr 09, 2014 | Modified: Apr 12, 2025
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
6.8 MODERATE
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V3
Ubuntu
MEDIUM
root.io logo minimus.io logo echo.ai logo

Google V8, as used in Google Chrome before 34.0.1847.116, does not properly implement lazy deoptimization, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code, as demonstrated by improper handling of a heap allocation of a number outside the Small Integer (aka smi) range.

Affected Software

NameVendorStart VersionEnd Version
ChromeGoogle*34.0.1847.115 (including)
Chromium-browserUbuntulucid*
Chromium-browserUbuntuprecise*
Chromium-browserUbuntuquantal*
Chromium-browserUbuntusaucy*
Chromium-browserUbuntuupstream*
Libv8Ubuntulucid*
Libv8Ubuntuprecise*
Libv8Ubuntuquantal*
Libv8Ubuntusaucy*
Libv8-3.14Ubuntuartful*
Libv8-3.14Ubuntubionic*
Libv8-3.14Ubuntucosmic*
Libv8-3.14Ubuntudevel*
Libv8-3.14Ubuntuesm-apps/bionic*
Libv8-3.14Ubuntuesm-apps/xenial*
Libv8-3.14Ubuntusaucy*
Libv8-3.14Ubuntutrusty*
Libv8-3.14Ubuntuupstream*
Libv8-3.14Ubuntuutopic*
Libv8-3.14Ubuntuvivid*
Libv8-3.14Ubuntuwily*
Libv8-3.14Ubuntuxenial*
Libv8-3.14Ubuntuyakkety*
Libv8-3.14Ubuntuzesty*
Qtjsbackend-opensource-srcUbuntusaucy*

References