VULNERABILITY INTELLIGENCE
CVE-2010-0659
CVSS score9.3 HIGH
EPSS probability3.19%
CISA KEVNot currently listed
Published2010-02-18
Last modified2026-06-16
CVSS vectorAV:N/AC:M/Au:N/C:C/I:C/A:C
Description
The image decoder in WebKit before r52833, as used in Google Chrome before 4.0.249.78, does not properly handle a failure of memory allocation, which allows remote attackers to execute arbitrary code in the Chrome sandbox via a malformed GIF file that specifies a large size.