CVE-2014-1736
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows...
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.
Exploit likelihood
What each source reports
NVD Score used
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.
- Record
CVE-2014-1736- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-190
- Updated
- 2026-11-02
CVE List No score
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.
- Record
CVE-2014-1736- Updated
- 2026-11-02
EUVDEUVD-2014-1810 No score
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.
- Record
EUVD-2014-1810- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-qf53-7c4q-f3hr No score
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows...
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.
- Record
GHSA-qf53-7c4q-f3hr- Weakness
- CWE-190
- Updated
- 2026-11-02
OSVMGASA-2014-0213 No score
Updated chromium-browser-stable packages fix multiple vulnerabilities
Updated chromium-browser-stable packages fix security vulnerabilities:
A type confusion issue was discovered in the v8 javascript library (CVE-2014-1730).
John Butler discovered a type confusion issue in the WebKit/Blink document object model implementation (CVE-2014-1731).
Khalil Zhani discovered a use-after-free issue in the speech recognition feature (CVE-2014-1732).
Jed Davis discovered a way to bypass the seccomp-bpf sandbox (CVE-2014-1733).
The Google Chrome development team discovered and fixed multiple issues with potential security impact (CVE-2014-1734).
The Google Chrome development team discovered and fixed multiple issues in version 3.24.35.33 of the v8 javascript library (CVE-2014-1735).
SkyLined discovered an integer overlflow issue in the v8 javascript library (CVE-2014-1736).
- Record
MGASA-2014-0213- Updated
- 2026-11-02
OSVUBUNTU-CVE-2014-1736 No score
Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.
- Record
UBUNTU-CVE-2014-1736- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserDebian:7 From an advisory covering 7 CVEs |
before 34.0.1847.132-1~deb7u1, plus listed versions 26.0.1410.43-127.0.1453.110-127.0.1453.110-1~deb7u127.0.1453.110-227.0.1453.93-1 Show 31 moreShow less27.0.1453.93-1~deb7u128.0.1500.71-128.0.1500.71-1~deb7u128.0.1500.71-228.0.1500.95-128.0.1500.95-1~deb7u128.0.1500.95-228.0.1500.95-329.0.1547.57-129.0.1547.57-1~deb7u129.0.1547.57-229.0.1547.57-329.0.1547.57-3+exp130.0.1599.101-130.0.1599.101-1~deb7u130.0.1599.101-230.0.1599.101-331.0.1650.57-131.0.1650.57-1~deb7u131.0.1650.63-131.0.1650.63-1~deb7u132.0.1700.123-132.0.1700.123-1~deb7u132.0.1700.123-232.0.1700.123-332.0.1700.123-433.0.1750.152-133.0.1750.152-1~deb7u134.0.1847.116-134.0.1847.116-1~deb7u134.0.1847.116-2 |
34.0.1847.132-1~deb7u1 |
chromium-browser-stableMageia:3 From an advisory covering 7 CVEs |
before 34.0.1847.132-2.mga3 | 34.0.1847.132-2.mga3 |
chromium-browser-stableMageia:3 From an advisory covering 7 CVEs |
before 34.0.1847.132-2.mga3.tainted | 34.0.1847.132-2.mga3.tainted |
chromium-browser-stableMageia:4 From an advisory covering 7 CVEs |
before 34.0.1847.132-2.mga4 | 34.0.1847.132-2.mga4 |
chromium-browser-stableMageia:4 From an advisory covering 7 CVEs |
before 34.0.1847.132-2.mga4.tainted | 34.0.1847.132-2.mga4.tainted |
chromium-browserUbuntu:14.04:LTS |
before 36.0.1985.125-0ubuntu1.14.04.0~pkg1029, plus listed versions 29.0.1547.65-0ubuntu231.0.1650.63-0ubuntu1~20131204.132.0.1700.107-0ubuntu1~20140204.977.133.0.1750.152-0ubuntu1~pkg995.134.0.1847.116-0ubuntu2 |
36.0.1985.125-0ubuntu1.14.04.0~pkg1029 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1736 is a high vulnerability (CVSS 7.5) in Google Chrome, published May 3, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.07%, the 81st percentile. Fixed in chromium-browser 36.0.1985.125-0ubuntu1.14.04.0~pkg1029.
