CVE-2015-1224
google chrome: no CVSS score yet. EPSS 1.8% chance of exploitation in the next 30 days.
The VpxVideoDecoder::VpxDecode function in media/filters/vpx_video_decoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service (out-of-bounds read) via crafted VPx video data.
- EPSS
- 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
- CWE
- CWE-17
- Published
- Modified
- Record from
- the NVD, synced
Affected
- google:chrome