CVE-2011-3914 describes an out-of-bounds write vulnerability within the internationalization functionality of Google V8, affecting Google Chrome versions prior to 16.0.912.63. This flaw could be triggered by remote attackers through unknown vectors, potentially leading to a denial of service or other unspecified impacts. With a CVSS score of 7.5, it is considered highly severe, requiring no authentication and having low attack complexity, with potential for partial compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, no publicly available exploit code (Metasploit, Nuclei, ExploitDB), and it is not listed in the KEV catalog, though it has received some community discussion and media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 16.0.912.63CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:P/I:P/A:P
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.