VYPR
← All advisories
Unrated severityNVD Advisory· Published Mar 16, 2014· Updated May 6, 2026

CVE-2014-1700

CVE-2014-1700

Description

Use-after-free vulnerability in modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before 33.0.1750.149, allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging improper handling of a certain utterance data structure.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Use-after-free in SpeechSynthesis.cpp in Blink/Chrome before 33.0.1750.149 allows remote attackers to cause denial of service or possibly other impacts via improper utterance handling.

Vulnerability

A use-after-free vulnerability exists in the SpeechSynthesis::utteranceData structure handling within modules/speech/SpeechSynthesis.cpp in Blink, as used in Google Chrome before version 33.0.1750.149. The vulnerability is triggered by improper management of utterance objects, leading to use of memory after it is freed.

Exploitation

An attacker can exploit this by crafting a malicious web page that triggers the use-after-free condition. No special privileges or user interaction beyond visiting the page are required. The exact steps involve manipulating speech synthesis utterances to cause a dangling pointer.

Impact

Successful exploitation could lead to a denial of service (browser crash) or potentially arbitrary code execution with the privileges of the browser process, though the description only confirms DoS and unspecified other impact.

Mitigation

Google fixed this vulnerability in Chrome 33.0.1750.149. Users should upgrade to at least this version. For Gentoo Linux users, upgrading to Chromium >=37.0.2062.94 as per GLSA 201408-16 [1] is recommended. No workaround is known.

References
  1. Multiple vulnerabilities (GLSA 201408-16) — Gentoo security

AI Insight generated on May 23, 2026. Synthesized from this CVE's description and the cited reference URLs; citations are validated against the source bundle.

Affected products

109
  • Google/Chrome107 versions
    cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 106 more
    • cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=33.0.1750.146
    • cpe:2.3:a:google:chrome:33.0.1750.0:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.1:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.10:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.104:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.106:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.107:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.108:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.109:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.11:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.110:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.111:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.112:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.113:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.115:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.116:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.117:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.12:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.124:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.125:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.126:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.13:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.132:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.133:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.135:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.136:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.14:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.144:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.15:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.16:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.18:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.19:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.2:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.20:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.21:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.22:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.23:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.24:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.25:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.26:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.27:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.28:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.29:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.3:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.30:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.31:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.34:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.35:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.36:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.37:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.38:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.39:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.4:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.40:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.41:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.42:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.43:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.44:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.45:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.46:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.47:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.48:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.49:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.5:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.50:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.51:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.52:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.53:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.54:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.55:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.56:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.57:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.58:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.59:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.6:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.60:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.61:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.62:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.63:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.64:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.65:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.66:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.67:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.68:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.69:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.7:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.70:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.71:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.73:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.74:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.75:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.76:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.77:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.79:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.8:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.80:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.81:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.82:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.83:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.85:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.88:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.89:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.9:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.90:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.91:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.92:*:*:*:*:*:*:*
    • cpe:2.3:a:google:chrome:33.0.1750.93:*:*:*:*:*:*:*
  • Google/Google Chromellm-fuzzy
    Range: <33.0.1750.149
  • osv-coords
    pkg:rpm/opensuse/chromium&distro=openSUSE%20Tumbleweed
    Range: < 55.0.2883.75-3.1

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

7

News mentions

0

No linked articles in our index yet.