Not a U.S. government website. NDD is an independent vulnerability database by Volerion and is not affiliated with or endorsed by NIST or NVD.
CVE-2014-3157 Details
Description
Heap-based buffer overflow in the FFmpegVideoDecoder::GetVideoBuffer function in media/filters/ffmpeg_video_decoder.cc in Google Chrome before 35.0.1916.153 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging VideoFrame data structures that are too small for proper interaction with an underlying FFmpeg library.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No CVSS 3.x data is available for this CVE.
No data available for CVSS Version 2.0 on this CVE.
No SSVC data is available for this CVE.
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-119 | Improper Restriction of Operations within the Bounds of a Memory Buffer | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| google chrome | <= 35.0.1916.152 35.0.1916.0 35.0.1916.1 35.0.1916.2 35.0.1916.3 35.0.1916.4 35.0.1916.5 35.0.1916.6 35.0.1916.7 35.0.1916.8 35.0.1916.9 35.0.1916.10 35.0.1916.11 35.0.1916.13 35.0.1916.14 35.0.1916.15 35.0.1916.17 35.0.1916.18 35.0.1916.19 35.0.1916.20 35.0.1916.21 35.0.1916.22 35.0.1916.23 35.0.1916.27 35.0.1916.31 35.0.1916.32 35.0.1916.33 35.0.1916.34 35.0.1916.35 35.0.1916.36 35.0.1916.37 35.0.1916.38 35.0.1916.39 35.0.1916.40 35.0.1916.41 35.0.1916.42 35.0.1916.43 35.0.1916.44 35.0.1916.45 35.0.1916.46 35.0.1916.47 35.0.1916.48 35.0.1916.49 35.0.1916.51 35.0.1916.52 35.0.1916.54 35.0.1916.56 35.0.1916.57 35.0.1916.59 35.0.1916.61 35.0.1916.68 35.0.1916.69 35.0.1916.71 35.0.1916.72 35.0.1916.74 35.0.1916.77 35.0.1916.80 35.0.1916.82 35.0.1916.84 35.0.1916.85 35.0.1916.86 35.0.1916.88 35.0.1916.90 35.0.1916.92 35.0.1916.93 35.0.1916.95 35.0.1916.96 35.0.1916.98 35.0.1916.99 35.0.1916.101 35.0.1916.103 35.0.1916.104 35.0.1916.105 35.0.1916.106 35.0.1916.107 35.0.1916.108 35.0.1916.109 35.0.1916.110 35.0.1916.111 35.0.1916.112 35.0.1916.113 35.0.1916.114 35.0.1916.115 35.0.1916.116 35.0.1916.117 35.0.1916.118 35.0.1916.119 35.0.1916.120 35.0.1916.121 35.0.1916.122 35.0.1916.123 35.0.1916.124 35.0.1916.125 35.0.1916.126 35.0.1916.127 35.0.1916.128 35.0.1916.137 35.0.1916.138 35.0.1916.140 35.0.1916.141 35.0.1916.142 35.0.1916.149 35.0.1916.150 35.0.1916.151 |
CPE
Remediation
| |
Change History
9 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| May 6, 2026 | Status Change | [email protected] |
| Nov 21, 2024 | CVE Modified | CVE |
| May 14, 2024 | CVE Modified | [email protected] |
| Nov 7, 2023 | CVE Source Update | [email protected] |
| Nov 7, 2023 | CVE Modified | [email protected] |
| Dec 29, 2017 | CVE Modified | [email protected] |
| Jan 7, 2017 | CVE Modified | [email protected] |
| Jun 11, 2014 | Initial Analysis | [email protected] |