CVE-2014-1710

Severity: high (CVSS 7.5 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2014-03-16 · updated 2026-06-17
Weakness: CWE-119

Description

The AsyncPixelTransfersCompletedQuery::End function in gpu/command_buffer/service/query_manager.cc in Google Chrome, as used in Google Chrome OS before 33.0.1750.152, does not check whether a certain position is within the bounds of a shared-memory segment, which allows remote attackers to cause a denial of service (GPU command-buffer memory corruption) or possibly have unspecified other impact via unknown vectors.

Affected products

Google ChromeOS: through 33.0.1750.149; 33.0.1750.2, 33.0.1750.5, 33.0.1750.16, 33.0.1750.29, 33.0.1750.51, 33.0.1750.58 (+4)

References

http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
https://code.google.com/p/chromium/issues/detail?id=351852
https://src.chromium.org/viewvc/chrome?revision=256723&view=revision
https://src.chromium.org/viewvc/chrome?revision=256918&view=revision
http://googlechromereleases.blogspot.com/2014/03/stable-channel-update-for-chrome-os_14.html
https://code.google.com/p/chromium/issues/detail?id=351852
https://src.chromium.org/viewvc/chrome?revision=256723&view=revision
https://src.chromium.org/viewvc/chrome?revision=256918&view=revision

Get alerted when CVE-2014-1710 or the next vulnerability affects your stack