CVE-2009-1442: Google Chrome

Medium severity, CVSS 6.8. EPSS: 2.4% chance of exploitation in the next 30 days.

Multiple integer overflows in Skia, as used in Google Chrome 1.x before 1.0.154.64 and 2.x, and possibly Android, might allow remote attackers to execute arbitrary code in the renderer process via a crafted (1) image or (2) canvas.

Affected products

• Google Chrome: up to and including 1.0.154.53; version 0.2.149.29 only; version 0.2.149.30 only; version 0.2.152.1 only; version 0.2.153.1 only; version 0.3.154.0 only; …

Published 2009-05-07. Last modified 2026-06-16.