CVE-2015-8480 describes an out-of-bounds memory access vulnerability in Google Chrome versions prior to 47.0.2526.73. Specifically, the VideoFramePool::PoolImpl::CreateFrame function failed to initialize memory for video-frame data, which could be triggered by improper interaction with the FFmpeg vp3_h_loop_filter_c function. This vulnerability carries a critical CVSS score of 10.0, indicating a network-exploitable flaw with low attack complexity, allowing for complete compromise of confidentiality, integrity, and availability. There is no evidence of active exploitation, publicly available exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage surrounding this CVE.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
<= 46.0.2490.86CPE matchmatch criteria | cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.
No media coverage found for this CVE.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.