← Database

CVE-2009-1441

CRITICAL CVSS: 9.3 Published: 2009-05-07 Modified: 2026-06-16

Description

Heap-based buffer overflow in the ParamTraits::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.

Affected Platforms

Google Chrome

Weakness Type

CWE-119

References