VULNERABILITY INTELLIGENCE
CVE-2011-1798
CVSS score7.5 HIGH
EPSS probability1.08%
CISA KEVNot currently listed
Published2014-12-26
Last modified2026-06-16
CVSS vectorAV:N/AC:L/Au:N/C:P/I:P/A:P
Description
rendering/svg/RenderSVGText.cpp in WebCore in WebKit in Google Chrome before 11.0.696.65 does not properly perform a cast of an unspecified variable during an attempt to handle a block child, which allows remote attackers to cause a denial of service (application crash) or possibly have unknown other impact via a crafted text element in an SVG document.
Weakness classification
- CWE-20: Improper Input Validation