CVE-2012-2864

Severity: critical (CVSS 10.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2012-08-22 · updated 2026-06-16
Weakness: CWE-119

Description

Mesa, as used in Google Chrome before 21.0.1183.0 on the Acer AC700, Cr-48, and Samsung Series 5 and 5 550 Chromebook platforms, and the Samsung Chromebox Series 3, allows remote attackers to execute arbitrary code via unspecified vectors that trigger an "array overflow."

Affected products

Google ChromeOS: 21.0.1180.0, 21.0.1180.1, 21.0.1180.2, 21.0.1180.3, 21.0.1180.4, 21.0.1180.5 (+27)

References

http://code.google.com/p/chromium/issues/detail?id=141901
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html
http://secunia.com/advisories/51215
http://www.mandriva.com/security/advisories?name=MDVSA-2013:103
http://www.ubuntu.com/usn/USN-1623-1
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264
http://code.google.com/p/chromium/issues/detail?id=141901
http://googlechromereleases.blogspot.com/2012/08/stable-channel-update-for-chrome-os.html
http://secunia.com/advisories/51215
http://www.mandriva.com/security/advisories?name=MDVSA-2013:103
http://www.ubuntu.com/usn/USN-1623-1
https://wiki.mageia.org/en/Support/Advisories/MGASA-2012-0264

Get alerted when CVE-2012-2864 or the next vulnerability affects your stack