Out-of-bounds read vulnerability in ReverbConvolverStage function in Blink

CVE-2013-2917 · MEDIUM Severity

AV:N/AC:L/AU:N/C:N/I:N/A:P

The ReverbConvolverStage::ReverbConvolverStage function in core/platform/audio/ReverbConvolverStage.cpp in the Web Audio implementation in Blink, as used in Google Chrome before 30.0.1599.66, allows remote attackers to cause a denial of service (out-of-bounds read) via vectors related to the impulseResponse array.

Learn more about our Cis Benchmark Audit For Google Chrome.