CVE-2015-1227

CVE-2015-1227 describes a memory initialization vulnerability in the DragImage::create function within Blink, affecting Google Chrome versions prior to 41.0.2272.76. This flaw allows remote attackers to achieve an unspecified impact by triggering a failed image decoding, such as with an image lacking a default orientation. With a CVSS score of 7.5, this vulnerability is considered high severity, indicating a network-based attack with low complexity that could lead to partial confidentiality, integrity, and availability impacts. There is no evidence of active exploitation, nor are there readily available exploit modules in Metasploit, Nuclei, or ExploitDB, though it has garnered some community discussion and media coverage.