CVE-2015-8664

CVE-2015-8664 is an integer overflow vulnerability in the WebCursor::Deserialize function within Google Chrome versions prior to 47.0.2526.106. This flaw allows remote attackers to trigger a denial of service or potentially achieve other unspecified impacts by providing a specially crafted RGBA pixel array with manipulated dimensions. The vulnerability carries a high CVSSv3 score of 8.8, indicating a critical risk due to its network-based attack vector, low attack complexity, and high potential for confidentiality, integrity, and availability impacts. While there is no evidence of active exploitation in the wild or readily available Metasploit/Nuclei exploits, an ExploitDB entry (EDB-39039) suggests a potential privilege escalation from the renderer to the browser process. Community discussion and media coverage for this CVE are minimal.