CVE-2015-1224

CVE-2015-1224 describes an out-of-bounds read vulnerability in the VpxVideoDecoder::VpxDecode function within Google Chrome versions prior to 41.0.2272.76. This flaw arises from the decoder's failure to verify identical alpha-plane and image dimensions when processing VPx video data. A remote attacker could exploit this by crafting malicious VPx video, leading to a denial of service. While the CVSS score is 5.0 (medium severity) with a low attack complexity, indicating a potential for denial of service, there is no evidence of active exploitation, publicly available exploit code, or significant community discussion or media coverage beyond a single article.