Design/Logic Flaw

platform/image-decoders/ImageFrame.h in Blink, as used in Google Chrome before 40.0.2214.91, does not initialize a variable that is used in calls to the Skia SkBitmap::setAlphaType function, which might allow remote attackers to cause a denial of service or possibly have unspecified other impact...

CVE-2015-1361

CVE-2015-1361 affects Blink/ImageFrame.h in Google Chrome’s rendering stack, where an uninitialized variable is used by Skia’s SkBitmap::setAlphaType. This can allow a remote attacker to trigger a denial of service via a crafted HTML document. The vulnerability is tied to Chrome versions before 4...