VULNERABILITY INTELLIGENCE

CVE-2010-0649

CVSS score9.3 HIGH
EPSS probability1.27%
CISA KEVNot currently listed
Published2010-02-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C

Description

Integer overflow in the CrossCallParamsEx::CreateFromBuffer function in sandbox/src/crosscall_server.cc in Google Chrome before 4.0.249.89 allows attackers to leverage renderer access to cause a denial of service (heap memory corruption) or possibly have unspecified other impact via a malformed message, related to deserializing of sandbox messages.

Primary references