CVE-2009-1441: Google Chrome

High severity, CVSS 9.3. EPSS: 2% chance of exploitation in the next 30 days.

Heap-based buffer overflow in the ParamTraits<SkBitmap>::Read function in Google Chrome before 1.0.154.64 allows attackers to leverage renderer access to cause a denial of service (application crash) or possibly execute arbitrary code via vectors related to a large bitmap that arrives over the IPC channel.

Affected products

• Google Chrome: up to and including 1.0.154.53; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; version 0.3.154.0 only; …

Published 2009-05-07. Last modified 2026-06-16.