CVE-2011-2850 describes an out-of-bounds read vulnerability in Google Chrome versions prior to 14.0.835.163. This flaw, triggered by improper handling of Khmer characters, could allow a remote attacker to cause a denial of service. With a CVSS score of 5.0, it is considered a medium severity issue, requiring no authentication and having a low attack complexity, though its impact is limited to availability. There is no evidence of active exploitation, public exploit code, or inclusion in CISA's KEV catalog, and community discussion and media coverage are minimal.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 14.0.835.163CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:N/I:N/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.0 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.