CVE-2015-1224: Undefined Security Weakness

The VpxVideoDecoder::VpxDecode function in media/filters/vpxvideodecoder.cc in the vpxdecoder implementation in Google Chrome before 41.0.2272.76 does not ensure that alpha-plane dimensions are identical to image dimensions, which allows remote attackers to cause a denial of service out-of-bounds...

PT-2015-5179

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 41.0.2272.76 Description The issue arises from the VpxVideoDecoder::VpxDecode function in the vpxdecoder implementation, where it fails to ensure that alpha-plane dimensions match image dimensions. This allows...