← Database

CVE-2010-0659

CRITICAL CVSS: 9.3 Published: 2010-02-18 Modified: 2026-06-16

Description

The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.

Affected Platforms

Google ChromeApple Webkit

Weakness Type

CWE-399

References