CVE-2014-9689

CVE-2014-9689 describes a vulnerability in Google Chrome versions prior to 41.0.2272.76, where the browser improperly allowed access to high-rate gyroscope data. This flaw enabled remote attackers, via a specially crafted website listening for ondeviceorientation events, to potentially reconstruct speech signals from a device's physical environment. The vulnerability has a CVSS score of 5.0 (Medium), indicating a network-based attack with low complexity, requiring no authentication, and primarily impacting confidentiality. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.