CVE-2014-3173

CVE-2014-3173 describes a denial-of-service vulnerability in the WebGL implementation of Google Chrome versions prior to 37.0.2062.94. This flaw allows remote attackers to trigger a read of uninitialized memory by crafting a malicious CANVAS element, due to improper interaction between clear calls and the draw buffer state. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having a low attack complexity, though its impact is limited to availability. There is no evidence of active exploitation, public exploit code, or Metasploit/Nuclei modules, and it is not listed in the KEV catalog. Community discussion and media coverage are minimal, indicating low widespread attention.