{"id":"CVE-2014-1736","aliases":["DSA-2920-1","EUVD-2014-1810","GHSA-qf53-7c4q-f3hr","MGASA-2014-0213","UBUNTU-CVE-2014-1736"],"status":"published","title":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows...","description":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.","severity":{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.02072,"percentile":0.81583,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-190"],"published":"2014-05-03T00:00:00Z","modified":"2026-06-17T00:05:28Z","fixes":[{"ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","fixed_in":["36.0.1985.125-0ubuntu1.14.04.0~pkg1029"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"Debian:7","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.1847.132-1~deb7u1"}]}],"versions":["26.0.1410.43-1","27.0.1453.110-1","27.0.1453.110-1~deb7u1","27.0.1453.110-2","27.0.1453.93-1","27.0.1453.93-1~deb7u1","28.0.1500.71-1","28.0.1500.71-1~deb7u1","28.0.1500.71-2","28.0.1500.95-1","28.0.1500.95-1~deb7u1","28.0.1500.95-2","28.0.1500.95-3","29.0.1547.57-1","29.0.1547.57-1~deb7u1","29.0.1547.57-2","29.0.1547.57-3","29.0.1547.57-3+exp1","30.0.1599.101-1","30.0.1599.101-1~deb7u1","30.0.1599.101-2","30.0.1599.101-3","31.0.1650.57-1","31.0.1650.57-1~deb7u1","31.0.1650.63-1","31.0.1650.63-1~deb7u1","32.0.1700.123-1","32.0.1700.123-1~deb7u1","32.0.1700.123-2","32.0.1700.123-3","32.0.1700.123-4","33.0.1750.152-1","33.0.1750.152-1~deb7u1","34.0.1847.116-1","34.0.1847.116-1~deb7u1","34.0.1847.116-2"],"bundled":7},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.1847.132-2.mga3"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:3","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.1847.132-2.mga3.tainted"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:4","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.1847.132-2.mga4"}]}],"bundled":7},{"source":"osv","ecosystem":"Mageia:4","package":"chromium-browser-stable","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"34.0.1847.132-2.mga4.tainted"}]}],"bundled":7},{"source":"osv","ecosystem":"Ubuntu:14.04:LTS","package":"chromium-browser","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"36.0.1985.125-0ubuntu1.14.04.0~pkg1029"}]}],"versions":["29.0.1547.65-0ubuntu2","31.0.1650.63-0ubuntu1~20131204.1","32.0.1700.107-0ubuntu1~20140204.977.1","33.0.1750.152-0ubuntu1~pkg995.1","34.0.1847.116-0ubuntu2"]}],"products":[{"vendor":"google","product":"chrome"}],"references":[{"url":"https://code.google.com/p/v8/source/detail?r=20519","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"http://secunia.com/advisories/58301","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"]},{"url":"http://googlechromereleases.blogspot.com/2014/04/stable-channel-update_24.html","tags":["x_refsource_CONFIRM","x_transferred","web"]},{"url":"http://www.debian.org/security/2014/dsa-2920","tags":["vendor-advisory","x_refsource_DEBIAN","x_transferred"]},{"url":"https://code.google.com/p/chromium/issues/detail?id=359802","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://code.google.com/p/v8/source/detail?r=20525","tags":["x_refsource_CONFIRM","x_transferred"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2014-1736"},{"url":"https://github.com/advisories/GHSA-qf53-7c4q-f3hr"},{"url":"https://advisories.mageia.org/MGASA-2014-0213.html","tags":["advisory"]},{"url":"https://www.debian.org/security/2014/dsa-2920","tags":["web"]},{"url":"https://bugs.mageia.org/show_bug.cgi?id=13325","tags":["report"]},{"url":"https://ubuntu.com/security/CVE-2014-1736","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2014-1736","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2014-1736","description":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.","status":"published","published":"2014-05-06T10:00:00Z","modified":"2024-08-06T09:50:10.992Z","updated_at":"2026-11-02T14:33:46.310517Z"}],"euvd":[{"id":"EUVD-2014-1810","description":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.","status":"published","published":"2014-05-06T10:00:00Z","modified":"2024-08-06T09:50:10Z","updated_at":"2026-11-03T01:57:17.345507Z"}],"ghsa":[{"id":"GHSA-qf53-7c4q-f3hr","title":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows...","description":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.","status":"published","published":"2022-05-17T04:43:13Z","modified":"2023-01-30T05:06:30Z","cwes":["CWE-190"],"updated_at":"2026-11-02T14:47:30.5047Z"}],"nvd":[{"id":"CVE-2014-1736","description":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.","status":"published","published":"2014-05-06T10:44:05.737Z","modified":"2026-06-17T00:05:28.063Z","cvss":[{"version":"2.0","score":7.5,"vector":"AV:N/AC:L/Au:N/C:P/I:P/A:P","level":"high","assessor":"primary"}],"cwes":["CWE-190"],"updated_at":"2026-11-02T14:02:54.082915Z"}],"osv":[{"id":"DSA-2920-1","title":"chromium-browser - security update","status":"published","published":"2014-05-03T00:00:00Z","modified":"2026-03-09T01:18:34.469648Z","updated_at":"2026-11-02T15:46:15.843838Z"},{"id":"MGASA-2014-0213","title":"Updated chromium-browser-stable packages fix multiple vulnerabilities","description":"Updated chromium-browser-stable packages fix security vulnerabilities:\n\nA type confusion issue was discovered in the v8 javascript library\n(CVE-2014-1730).\n\nJohn Butler discovered a type confusion issue in the WebKit/Blink document\nobject model implementation (CVE-2014-1731).\n\nKhalil Zhani discovered a use-after-free issue in the speech recognition\nfeature (CVE-2014-1732).\n\nJed Davis discovered a way to bypass the seccomp-bpf sandbox\n(CVE-2014-1733).\n\nThe Google Chrome development team discovered and fixed multiple issues\nwith potential security impact (CVE-2014-1734).\n\nThe Google Chrome development team discovered and fixed multiple issues\nin version 3.24.35.33 of the v8 javascript library (CVE-2014-1735).\n\nSkyLined discovered an integer overlflow issue in the v8 javascript\nlibrary (CVE-2014-1736).\n","status":"published","published":"2014-05-10T19:44:04Z","modified":"2026-04-16T06:23:29.476866334Z","updated_at":"2026-11-02T15:49:39.121227Z"},{"id":"UBUNTU-CVE-2014-1736","description":"Integer overflow in api.cc in Google V8, as used in Google Chrome before 34.0.1847.131 on Windows and OS X and before 34.0.1847.132 on Linux, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a large length value.","status":"published","published":"2014-05-06T10:44:00Z","modified":"2025-09-08T16:43:08Z","updated_at":"2026-11-02T15:54:07.855521Z"}]}}