CVE-2015-8479
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio...
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.
Exploit likelihood
What each source reports
NVD Score used
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.
- Record
CVE-2015-8479- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.
- Record
CVE-2015-8479- Updated
- 2026-11-02
EUVDEUVD-2015-8360 No score
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.
- Record
EUVD-2015-8360- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-f37m-mqw6-rqv5 No score
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio...
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.
- Record
GHSA-f37m-mqw6-rqv5- Weakness
- CWE-119
- Updated
- 2026-11-02
OSVUBUNTU-CVE-2015-8479 No score
Use-after-free vulnerability in the AudioOutputDevice::OnDeviceAuthorized function in media/audio/audio_output_device.cc in Google Chrome before 47.0.2526.73 allows attackers to cause a denial of service (heap memory corruption) or possibly have unspecified other impact by triggering access to an unauthorized audio output device.
- Record
UBUNTU-CVE-2015-8479- Updated
- 2026-11-02
Affected products
Affected packages
| Package | Affected | Fixed |
|---|---|---|
chromium-browserRed Hat:rhel_extras:6 From an advisory covering 26 CVEs |
before 0:47.0.2526.73-1.el6 | 0:47.0.2526.73-1.el6 |
chromium-browser-debuginfoRed Hat:rhel_extras:6 From an advisory covering 26 CVEs |
before 0:47.0.2526.73-1.el6 | 0:47.0.2526.73-1.el6 |
chromium-browserUbuntu:14.04:LTS |
before 47.0.2526.73-0ubuntu0.14.04.1.1106, plus listed versions 29.0.1547.65-0ubuntu231.0.1650.63-0ubuntu1~20131204.132.0.1700.107-0ubuntu1~20140204.977.133.0.1750.152-0ubuntu1~pkg995.134.0.1847.116-0ubuntu2 Show 13 moreShow less36.0.1985.125-0ubuntu1.14.04.0~pkg102937.0.2062.94-0ubuntu0.14.04.1~pkg104237.0.2062.120-0ubuntu0.14.04.1~pkg104938.0.2125.111-0ubuntu0.14.04.1.106139.0.2171.65-0ubuntu0.14.04.1.106440.0.2214.94-0ubuntu0.14.04.1.106840.0.2214.111-0ubuntu0.14.04.1.106941.0.2272.76-0ubuntu0.14.04.1.107643.0.2357.81-0ubuntu0.14.04.1.108943.0.2357.130-0ubuntu0.14.04.1.109244.0.2403.89-0ubuntu0.14.04.1.109545.0.2454.85-0ubuntu0.14.04.1.109745.0.2454.101-0ubuntu0.14.04.1.1099 |
47.0.2526.73-0ubuntu0.14.04.1.1106 |
oxide-qtUbuntu:14.04:LTS |
before 1.11.3-0ubuntu0.14.04.1, plus listed versions 1.0.0~bzr437-0ubuntu11.0.0~bzr452-0ubuntu11.0.0~bzr475-0ubuntu11.0.0~bzr490-0ubuntu11.0.0~bzr501-0ubuntu1 Show 18 moreShow less1.0.0~bzr501-0ubuntu21.0.4-0ubuntu0.14.04.11.0.5-0ubuntu0.14.04.11.1.2-0ubuntu0.14.04.11.2.5-0ubuntu0.14.04.11.3.4-0ubuntu0.14.04.11.4.2-0ubuntu0.14.04.11.4.3-0ubuntu0.14.04.11.5.5-0ubuntu0.14.04.31.5.6-0ubuntu0.14.04.21.6.5-0ubuntu0.14.04.11.6.6-0ubuntu0.14.04.11.7.8-0ubuntu0.14.04.11.7.9-0ubuntu0.14.04.11.8.4-0ubuntu0.14.04.21.9.1-0ubuntu0.14.04.21.9.5-0ubuntu0.14.04.11.10.3-0ubuntu0.14.04.1 |
1.11.3-0ubuntu0.14.04.1 |
History
| Recorded | Changed | Sources |
|---|---|---|
| affected, facts | ||
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-8479 is a high vulnerability (CVSS 7.5) in Google Chrome, published December 6, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.63%, the 50th percentile. Fixed in chromium-browser 47.0.2526.73-0ubuntu0.14.04.1.1106.
References
code.google.com/p/chromium/issues/detail?id=535605
googlechromereleases.blogspot.com/2015/12/stable-channel-update.html
nvd.nist.gov/vuln/detail/CVE-2015-8479
github.com/advisories/GHSA-f37m-mqw6-rqv5
access.redhat.com/errata/RHSA-2015:2545
Show 104 moreShow less
bugzilla.redhat.com/show_bug.cgi?id=1285774
security.access.redhat.com/data/csaf/v2/advisories/2015/rhsa-2015_2545.json
cve.org/CVERecord?id=CVE-2015-6764
nodejs.org/en/blog/vulnerability/cve-2015-8027_cve-2015-6764
ubuntu.com/security/CVE-2015-8479