Unscored severity · published Dec 12, 2012
CVE-2012-5144
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of…
–
CVSS
3.4%
EPSS
No
On KEV
Description
Google Chrome before 23.0.1271.97, and Libav 0.7.x before 0.7.7 and 0.8.x before 0.8.5, do not properly perform AAC decoding, which allows remote attackers to cause a denial of service (stack memory corruption) or possibly have unspecified other impact via vectors related to "an off-by-one overwrite when switching to LTP profile from MAIN."
Exploitation
Is it being used?
Exploit prediction (EPSS)3.4% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chrome · Google
through 23.0.1271.96; 23.0.1271.0; 23.0.1271.1; 23.0.1271.2; 23.0.1271.3; 23.0.1271.4; +34 more · source: NVD
LI
Libav · Libav
0.8; 0.8; 0.8.1; 0.8.2; 0.8.3; 0.8.4; +9 more · source: NVD
OP
Opensuse · Opensuse
12.1; 12.2 · source: NVD
UL
Ubuntu Linux · Canonical
11.10; 12.04; 12.10 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-5144
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-5144
googlechromereleases.blogspot.com
http://googlechromereleases.blogspot.com/2012/12/stable-channel-update.html
libav.org
http://libav.org/releases/libav-0.7.7.changelog
libav.org
http://libav.org/releases/libav-0.8.5.changelog
lists.opensuse.org
http://lists.opensuse.org/opensuse-updates/2012-12/msg00073.html
www.ubuntu.com
http://www.ubuntu.com/usn/USN-1705-1
code.google.com
https://code.google.com/p/chromium/issues/detail?id=161639
More from Chrome
9.8
CVE-2025-10585
Google Chromium V8 Type Confusion Vulnerability
9.8
CVE-2014-0497
Adobe Flash Player Integer Underflow Vulnerablity
9.6
CVE-2024-7971
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-5274
Google Chromium V8 Type Confusion Vulnerability
9.6
CVE-2024-4947
Google Chromium V8 Type Confusion Vulnerability