High severity8.8NVD Advisory· Published Dec 24, 2015· Updated Jun 17, 2026

CVE-2015-8664

Description

Integer overflow in the WebCursor::Deserialize function in content/common/cursors/webcursor.cc in Google Chrome before 47.0.2526.106 allows remote attackers to cause a denial of service or possibly have unspecified other impact via an RGBA pixel array with crafted dimensions, a different vulnerability than CVE-2015-6792.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Google/Chrome2 versions
cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:google:chrome:*:*:*:*:*:*:*:*range: <=47.0.2526.80
- (no CPE)range: <47.0.2526.106

Patches

Vulnerability mechanics

References

googlechromereleases.blogspot.com/2015/12/stable-channel-update_15.htmlnvd
www.securityfocus.com/bid/79686nvd
www.securitytracker.com/id/1034491nvd
www.ubuntu.com/usn/USN-2860-1nvd
code.google.com/p/chromium/issues/detailnvd
code.google.com/p/chromium/issues/detailnvd
codereview.chromium.org/1498903003nvd

News mentions

No linked articles in our index yet.

cvss	0.572
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000