| Package | Affected versions | Patched versions |
|---|---|---|
| chrome | = 35.0.1916.0= 35.0.1916.1= 35.0.1916.10= 35.0.1916.101= 35.0.1916.103= 35.0.1916.104= 35.0.1916.105= 35.0.1916.106= 35.0.1916.107= 35.0.1916.108= 35.0.1916.109= 35.0.1916.11= 35.0.1916.110= 35.0.1916.111= 35.0.1916.112= 35.0.1916.13= 35.0.1916.14= 35.0.1916.15= 35.0.1916.17= 35.0.1916.18= 35.0.1916.19= 35.0.1916.2= 35.0.1916.20= 35.0.1916.21= 35.0.1916.22= 35.0.1916.23= 35.0.1916.27= 35.0.1916.3= 35.0.1916.31= 35.0.1916.32= 35.0.1916.33= 35.0.1916.34= 35.0.1916.35= 35.0.1916.36= 35.0.1916.37= 35.0.1916.38= 35.0.1916.39= 35.0.1916.4= 35.0.1916.40= 35.0.1916.41= 35.0.1916.42= 35.0.1916.43= 35.0.1916.44= 35.0.1916.45= 35.0.1916.46= 35.0.1916.47= 35.0.1916.48= 35.0.1916.49= 35.0.1916.5= 35.0.1916.51= 35.0.1916.52= 35.0.1916.54= 35.0.1916.56= 35.0.1916.57= 35.0.1916.59= 35.0.1916.6= 35.0.1916.61= 35.0.1916.68= 35.0.1916.69= 35.0.1916.7= 35.0.1916.71= 35.0.1916.72= 35.0.1916.74= 35.0.1916.77= 35.0.1916.8= 35.0.1916.80= 35.0.1916.82= 35.0.1916.84= 35.0.1916.85= 35.0.1916.86= 35.0.1916.88= 35.0.1916.9= 35.0.1916.90= 35.0.1916.92= 35.0.1916.93= 35.0.1916.95= 35.0.1916.96= 35.0.1916.98= 35.0.1916.99≤ 35.0.1916.113 | |
| v8 | = 3.25.0= 3.25.1= 3.25.10= 3.25.11= 3.25.12= 3.25.13= 3.25.14= 3.25.15= 3.25.16= 3.25.17= 3.25.18= 3.25.19= 3.25.2= 3.25.20= 3.25.21= 3.25.22= 3.25.23= 3.25.24= 3.25.25= 3.25.26= 3.25.27= 3.25.3= 3.25.4= 3.25.5= 3.25.6= 3.25.7= 3.25.8= 3.25.9≤ 3.25.28 |
Integer underflow in the LCodeGen::PrepareKeyedOperand function in arm/lithium-codegen-arm.cc in Google V8 before 3.25.28.16, as used in Google Chrome before 35.0.1916.114, allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors that trigger a negative key value.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free