CVE-2014-7927

The SimplifiedLowering::DoLoadBuffer function in compiler/simplified-lowering.cc in Google V8, as used in Google Chrome before 40.0.2214.91, does not properly choose an integer data type, which allows remote attackers to cause a denial of service (memory corruption) or possibly have unspecified other impact via crafted JavaScript code.

Date published : 2015-01-22

http://www.securityfocus.com/bid/72288

http://googlechromereleases.blogspot.com/2015/01/stable-update.html